PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›CVE-2020-7919

CVE-2020-7919

golang: Integer overflow on 32bit architectures via crafted certificate allows for denial of service

Loading…

Severity

Important

Red Hat Product Security

7.5

CVSS 3.1

Review impact separately from score.

Published · January 28, 2020

Updated · February 26, 2026

Description

An integer overflow vulnerability was found in the Go crypto/x509 and golang.org/x/crypto/cryptobyte libraries on 32-bit architectures. A remote attacker could exploit this by supplying a crafted x.509 certificate, or other ASN.1 structure, as either a client or server to crash vulnerable Go applications.

Statement

Below products are only supported on 64bit architectures and are therefore not affected by this flaw:

  • OpenShift Container Platform
  • OpenShift Service Mesh
  • Red Hat Ceph Storage
  • Red Hat Gluster Storage
  • Container-native Virtualization

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-190 · Integer Overflow or Wraparound