Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-17596. PoCs published by pquerna.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2019-17596, demonstrating a denial-of-service (DoS) vulnerability in Go's DSA verification implementation. The exploit triggers a panic in `dsa.Verify` by manipulating DSA signature parameters, affecting versions of Go prior to 1.13.2.
Description
Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.
Exploits (1)
This repository contains a functional proof-of-concept exploit for CVE-2019-17596, demonstrating a denial-of-service (DoS) vulnerability in Go's DSA verification implementation. The exploit triggers a panic in `dsa.Verify` by manipulating DSA signature parameters, affecting versions of Go prior to 1.13.2.
References (13)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H