Skip to content
Log inStart free trial

GHSA-x3jr-pf6g-c48f CVE-2019-11841 GO-2023-1992

Golang/x/crypto message forgery vulnerability

Medium Go
Severity
5.9 / 10
Medium · CVSS 3.1
Exploit chance (EPSS)
2.00%
Chance of exploitation in the next 30 days. Higher than 80.78% of scored vulnerabilities.
Known exploited
No
Not in CISA's catalog
Weakness
CWE-347 Improper Verification of Cryptographic Signature
Fix
0.0.0-20190424203555-c05e17bb3b2d
Upgrade golang.org/x/crypto to this version or later

Description

A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP Message Format specification in RFC 4880 chapter 7, a cleartext signed message can contain one or more optional "Hash" Armor Headers. The "Hash" Armor Header specifies the message digest algorithm(s) used for the signature. However, the Go clearsign package ignores the value of this header, which allows an attacker to spoof it. Consequently, an attacker can lead a victim to believe the signature was generated using a different message digest algorithm than what was actually used. Moreover, since the library skips Armor Header parsing in general, an attacker can not only embed arbitrary Armor Headers, but also prepend arbitrary text to cleartext messages without invalidating the signatures.

Affected versions

Go

PackageVulnerableFixed in
golang.org/x/crypto
< 0.0.0-20190424203555-c05e17bb3b2d
0.0.0-20190424203555-c05e17bb3b2d

How to fix

Move to the fixed version or later with your package manager, update the lockfile, and run your tests. If the package only arrives through another dependency, upgrade that dependency first. If none of its releases pulls a fixed version yet, force the version with your package manager's override.

golang.org/x/crypto Go → 0.0.0-20190424203555-c05e17bb3b2d

go
go get golang.org/x/crypto@v0.0.0-20190424203555-c05e17bb3b2d && go mod tidy

Severity breakdown

CVSS 3.1 5.9

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack vector
Network
Attack complexity
High
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
None

Weakness

CWE-347: Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References

Advisories

Packages

Other links

Timeline

  1. Published
  2. Last updated by the source
  3. Latest EPSS score
AdvisorySeverityWhy it's related
GO-2026-6355
Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
High Also affects golang.org/x/crypto
GO-2026-6354
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
High Also affects golang.org/x/crypto
GO-2026-6303
Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
High Also affects golang.org/x/crypto
GO-2026-5932
The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
Not rated yet Also affects golang.org/x/crypto
GHSA-x527-x647-q7gg
golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement
Critical Also affects golang.org/x/crypto
GHSA-w879-237q-wc7r
golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS
High Also affects golang.org/x/crypto
GHSA-vgwf-h737-ff37
golang.org/x/crypto: Invoking client can cause server deadlock on unexpected responses
Critical Also affects golang.org/x/crypto
GHSA-rm3j-f69w-wqmq
golang.org/x/crypto vulnerable to infinite loop on large channel writes
Critical Also affects golang.org/x/crypto

Credits: Aida Mynzhasova (SEC Consult Vulnerability Lab)

Is this in your code?

MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.

Check your repos with MergeHarbor