Wind River Support Network

HomeDefectsLIN1018-5862

Fixed

LIN1018-5862 : Security Advisory - go - CVE-2020-7919

Created: Mar 17, 2020 Updated: Apr 15, 2020

Resolved Date: Mar 29, 2020

Found In Version: 10.18.44.1

Fix Version: 10.18.44.16

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.

CREATE(Triage):(User=admin) [CVE-2020-7919|https://nvd.nist.gov/vuln/detail/CVE-2020-7919]

CVEs

CVE-2020-7919