CVE-2019-17596 PoC — Google Go 信任管理问题漏洞

Source

https://github.com/pquerna/poc-dsa-verify-CVE-2019-17596

Associated Vulnerability

Title: Google Go 信任管理问题漏洞 (CVE-2019-17596)
Description:Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates.

Description

Demonstration of Go's dsa.Verify bug (CVE-2019-17596)

Readme

# Exploiting `dsa.Verify` in Go (CVE-2019-17596)

Please see the [associated blog post for details](https://paul.querna.org/articles/2019/10/24/dsa-verify-poc/).

# Running

Since versions of Go newer than 1.13.1 are patched, I;ve included a [Dockerfile](./Dockerfile), that makes it easier to pin your Go version.  Simply run Docker build:
```
docker build .
```

There are two files of interest:
- [`dsa_test.go`](./dsa_test.go): Contains a test case for causing `dsa.Verify` to panic/
- [`ssh_test.go`](./ssh_test.go): Contains a test case for making an `crypto/ssh.Client` to panic via an evil SSH Host Key.


## Improvements, bugs, adding feature, etc:

Please [open issues in Github](https://github.com/pquerna/poc-dsa-verify-CVE-2019-17596/issues) for ideas, bugs, and general thoughts.  Pull requests are of course preferred :)

## License

`poc-dsa-verify-CVE-2019-17596` is licensed under the [Apache License, Version 2.0](./LICENSE)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →