4 ms·
""" Go has an infinite loop in several big integer routines that makes Go programs vulnerable to remote denial of service attacks. Programs using HTTPS client
by tyho 11y ago
"""
Go has an infinite loop in several big integer routines that makes Go
programs vulnerable to remote denial of service attacks. Programs using
HTTPS client authentication or the Go ssh server libraries are both exposed
to this vulnerability. This is being addressed in the following CL:
https://golang.org/cl/21533 https://golang.org/cl/21533
"""
http://seclists.org/oss-sec/2016/q2/11 http://seclists.org/oss-sec/2016/q2/11
- tptacek 11y agoAhhhhh, I didn't consider DOS.