Wind River Support Network

HomeDefectsLIN1019-4147

Fixed

LIN1019-4147 : Security Advisory - go - CVE-2020-7919

Created: Mar 17, 2020 Updated: Apr 11, 2020

Resolved Date: Mar 29, 2020

Found In Version: 10.19.45.1

Fix Version: 10.19.45.6

Severity: Standard

Applicable for: Wind River Linux LTS 19

Component/s: Userspace

Description

Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.

CREATE(Triage):(User=admin) [CVE-2020-7919|https://nvd.nist.gov/vuln/detail/CVE-2020-7919]

CVEs

CVE-2020-7919