CVE-2020-7919

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Go before 1.12.16 and 1.13.x before 1.13.7 (and the crypto/cryptobyte package before 0.0.0-20200124225646-8b5121be2f68 for Go) allows attacks on clients (resulting in a panic) via a malformed X.509 certificate.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-295

Affected software

No affected versions have been published.

Timeline

Published: Mar 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-79207.5pmm-server in Percona Monitoring and Management (PMM) 2.2.x before 2.2.1 allows unauthenticated denial of service.CVE-2020-79215.3Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with vali CVE-2020-79226.5X.509 certificates generated by the MongoDB Enterprise Kubernetes Operator may allow an attacker with access to the Kubernetes cluster impro CVE-2020-79236.5A user authorized to perform database queries may cause denial of service by issuing specially crafted queries, which violate an invariant i CVE-2020-79246.5Usage of specific command line parameter in MongoDB Tools which was originally intended to just skip hostname checks, may result in MongoDB CVE-2020-79257.5Incorrect validation of user input in the role name parser may lead to use of uninitialized memory allowing an unauthenticated attacker to u CVE-2020-79266.5A user authorized to perform database queries may cause denial of service by issuing a specially crafted query which violates an invariant i CVE-2020-79276.5Specially crafted API calls may allow an authenticated user who holds Organization Owner privilege to obtain an API key with Global Role pri CVE-2020-79286.5A user authorized to perform database queries may trigger a read overrun and access arbitrary memory by issuing specially crafted queries. T CVE-2020-79296.5A user authorized to perform database queries may trigger denial of service by issuing specially crafted query contain a type of regex. This CVE-2020-79318.8In JFrog Artifactory 5.x and 6.x, insecure FreeMarker template processing leads to remote code execution, e.g., by modifying a .ssh/authoriz CVE-2020-79325.7OMERO.web before 5.6.3 optionally allows sensitive data elements (e.g., a session key) to be passed as URL query parameters. If an attacker