CVE-2019-17596 PoC — Google Go 信任管理问题漏洞

Source

https://github.com/pquerna/poc-dsa-verify-CVE-2019-17596

Associated Vulnerability

Title:Google Go 信任管理问题漏洞 (CVE-2019-17596)
Description:Google Go是美国谷歌（Google）公司的一款静态强类型、编译型、并发型，并具有垃圾回收功能的编程语言。 Google Go 1.12.11之前版本和1.13.2之前的1.3.x版本中存在信任管理问题漏洞。该漏洞源于网络系统或产品中缺乏有效的信任管理机制。攻击者可利用默认密码或者硬编码密码、硬编码证书等攻击受影响组件。

Description

Demonstration of Go's dsa.Verify bug (CVE-2019-17596)

Readme

# Exploiting `dsa.Verify` in Go (CVE-2019-17596)

Please see the [associated blog post for details](https://paul.querna.org/articles/2019/10/24/dsa-verify-poc/).

# Running

Since versions of Go newer than 1.13.1 are patched, I;ve included a [Dockerfile](./Dockerfile), that makes it easier to pin your Go version.  Simply run Docker build:
```
docker build .
```

There are two files of interest:
- [`dsa_test.go`](./dsa_test.go): Contains a test case for causing `dsa.Verify` to panic/
- [`ssh_test.go`](./ssh_test.go): Contains a test case for making an `crypto/ssh.Client` to panic via an evil SSH Host Key.


## Improvements, bugs, adding feature, etc:

Please [open issues in Github](https://github.com/pquerna/poc-dsa-verify-CVE-2019-17596/issues) for ideas, bugs, and general thoughts.  Pull requests are of course preferred :)

## License

`poc-dsa-verify-CVE-2019-17596` is licensed under the [Apache License, Version 2.0](./LICENSE)

File Snapshot


 [4.0K]  /data/pocs/279bef283cfdc19f21d719f45a3464bf20888c74
├── [ 180]  Dockerfile
├── [ 719]  dsa_test.go
├── [ 466]  go.mod
├── [2.5K]  go.sum
├── [ 11K]  LICENSE
├── [ 148]  NOTICE
├── [ 944]  README.md
├── [2.7K]  shared_test.go
├── [1.3K]  ssh_test.go
└── [ 160]  test.sh

0 directories, 10 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!