Reachable Assertion in crypto - CVE-2020-9283

Vulnerability identifier: #VU69447

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-9283

CWE-ID: CWE-617

Exploitation vector: Remote access

Exploit availability: Public exploit is available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a reachable assertion during signature verification process. A remote attacker can supply a specially crafted certificate to the application (server or client) and perform a denial of service (DoS) attack.

crypto
Arch Linux
golang-golang-x-crypto
cri-o (Red Hat package)
machine-config-daemon (Red Hat package)
openshift-clients (Red Hat package)
kernel (Red Hat package)
kernel-rt (Red Hat package)
redhat-release-coreos (Red Hat package)
Storage Defender – Data Protect
IBM Watson Machine Learning Accelerator
IBM Cloud Pak for Watson AIOps
Red Hat OpenShift Container Platform
IBM CICS TX Advanced
IBM CICS TX Standard

Install updates from vendor's website.

crypto - update to 0.0.0-20200220183623-bac4c82f6975
golang-golang-x-crypto - update to 0.0.20200303-1
Storage Defender – Data Protect - update to 1.3.0
cri-o (Red Hat package) - addressed in versions 1.16.6-18.rhaos4.3.git538d861.el7, 1.16.6-18.rhaos4.3.git538d861.el8
IBM Watson Machine Learning Accelerator - update to 2.3.9
IBM Cloud Pak for Watson AIOps - update to 4.1
machine-config-daemon (Red Hat package) - update to 4.3.30-202007230708.p0.git.2188.9f34d7f.el8
Red Hat OpenShift Container Platform - addressed in versions 4.3.31, 4.3.40, 4.5.5
openshift-clients (Red Hat package) - addressed in versions 4.3.31-202007250052.p0.git.3329.59998b9.el7, 4.3.31-202007250052.p0.git.3329.59998b9.el8
kernel (Red Hat package) - update to 4.18.0-193.13.2.el8_2
kernel-rt (Red Hat package) - update to 4.18.0-193.13.2.rt13.65.el8_2
IBM CICS TX Advanced - update to 11.1.0.0 ifix5
IBM CICS TX Standard - update to 11.1.0.0 ifix5
redhat-release-coreos (Red Hat package) - update to 43.82-6.el8

• Exploit #8620 - Go SSH servers 0.0.2 - Denial of Service (PoC) (November 21, 2022)

• https://groups.google.com/forum/#!topic/golang-announce/3L45YRc91SY
• http://packetstormsecurity.com/files/156480/Go-SSH-0.0.2-Denial-Of-Service.html
• https://lists.debian.org/debian-lts-announce/2020/10/msg00014.html
• https://lists.debian.org/debian-lts-announce/2020/11/msg00027.html
• https://lists.debian.org/debian-lts-announce/2020/11/msg00031.html
• https://packetstormsecurity.com/files/156480/Go-SSH-0.0.2-Denial-Of-Service.html

• Denial of service in Go Crypto
• IBM CICS TX update for golang
• Multiple vulnerabilities in IBM Storage Defender Data Protect
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Multiple vulnerabilities in IBM Watson Machine Learning Accelerator on Cloud Pak for Data
• Arch Linux update for golang-golang-x-crypto
• Reachable Assertion in Red Hat OpenShift Container Platform 4.3 packages
• Reachable Assertion in Red Hat OpenShift Container Platform 4.5
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.3