Every CVE Search/ Get API key

CVE-2019-6486

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...

8.2 HighFix available

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
High

Exploit likelihood

4.50%Up 1.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.2

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
CVE-2019-6486
CVSS 3.0
8.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
CVSS 2.0
6.4 MediumAV:N/AC:L/Au:N/C:P/I:N/A:P
Weakness
CWE-770
Updated
2026-11-02
CVE List No score

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
CVE-2019-6486
Updated
2026-11-02
EUVDEUVD-2019-16046 No score

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
EUVD-2019-16046
Updated
2026-11-03
GitHub AdvisoriesGHSA-vj2x-6gjj-jvh2 8.2

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which...

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
GHSA-vj2x-6gjj-jvh2
CVSS 3.0
8.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness
CWE-770
Updated
2026-11-02
OSVALPINE-CVE-2019-6486 8.2

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
ALPINE-CVE-2019-6486
CVSS 3.0
8.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-03
OSVAZL-79018 8.2

CVE-2019-6486 affecting package golang 1.25.7-1

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
AZL-79018
CVSS 3.0
8.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
Show 19 moreShow less
OSVAZL-98958 8.2

CVE-2019-6486 affecting package golang 1.27.1-1

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
AZL-98958
CVSS 3.0
8.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVBELL-CVE-2019-6486 8.2

CVE-2019-6486 does not affect BellSoft software

Record
BELL-CVE-2019-6486
CVSS 3.0
8.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSV 8.2

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
CVE-2019-6486
CVSS 3.0
8.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2019-6486 8.2

Go before 1.10.8 and 1.11.x before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks.

Record
UBUNTU-CVE-2019-6486
CVSS 3.0
8.2 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVGO-2022-0217 No score

Denial of service affecting P-521 and P-384 curves in crypto/elliptic

A DoS vulnerability in the crypto/elliptic implementations of the P-521 and P-384 elliptic curves may let an attacker craft inputs that consume excessive amounts of CPU.

These inputs might be delivered via TLS handshakes, X.509 certificates, JWT tokens, ECDH shares or ECDSA signatures. In some cases, if an ECDH private key is reused more than once, the attack can also lead to key recovery.

Record
GO-2022-0217
Updated
2026-11-02
OSVMGASA-2019-0066 No score

Updated golang packages fix security vulnerability

Remote code execution in go get, when executed with the -u flag (CVE-2018-16873).

An arbitrary filesystem write in go get, which could lead to code execution (CVE-2018-16874).

Denial of Service in the crypto/x509 package during certificate chain validation (CVE-2018-16875).

Go before 1.11.5 mishandles P-521 and P-384 elliptic curves, which allows attackers to cause a denial of service (CPU consumption) or possibly conduct ECDH private key recovery attacks (CVE-2019-6486).

Record
MGASA-2019-0066
Updated
2026-11-02
OSVopenSUSE-SU-2019:1164-1 No score

Security update for go1.11

This update for go1.11 to version 1.11.5 fixes the following issues:

Security issue fixed:

  • CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 (bsc#1123013 go#29903).

Other bug fixes and changes made:

  • Fix erroneous trailing backslash in %post script.
  • Use better forms of -exec ; in some places.

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1164-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1444-1 No score

Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

  • CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).
  • CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).
  • CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).
  • CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).
  • CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).

Other changes and bug fixes:

  • Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).
  • docker-test: Improvements to test packaging (bsc#1128746).
  • Move daemon.json file to /etc/docker directory (bsc#1114832).
  • Revert golang(API) removal since it turns out this breaks >= requires in certain cases (bsc#1114209).
  • Fix go build failures (bsc#1121397).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1444-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1499-1 No score

Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

  • CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).
  • CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).
  • CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).
  • CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).
  • CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).

Other changes and bug fixes:

  • Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).
  • docker-test: Improvements to test packaging (bsc#1128746).
  • Move daemon.json file to /etc/docker directory (bsc#1114832).
  • Revert golang(API) removal since it turns out this breaks >= requires in certain cases (bsc#1114209).
  • Fix go build failures (bsc#1121397).

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1499-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1506-1 No score

Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

  • CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).
  • CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).
  • CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).
  • CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).
  • CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).

Other changes and bug fixes:

  • Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).
  • docker-test: Improvements to test packaging (bsc#1128746).
  • Move daemon.json file to /etc/docker directory (bsc#1114832).
  • Revert golang(API) removal since it turns out this breaks >= requires in certain cases (bsc#1114209).
  • Fix go build failures (bsc#1121397).

This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.0:Update update project.

Record
openSUSE-SU-2019:1506-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10802-1 No score

go-1.17-1.1 on GA media

These are all security issues fixed in the go-1.17-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10802-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10803-1 No score

go1.10-1.10.8-8.2 on GA media

These are all security issues fixed in the go1.10-1.10.8-8.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10803-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10804-1 No score

go1.11-1.11.13-10.5 on GA media

These are all security issues fixed in the go1.11-1.11.13-10.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10804-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10805-1 No score

go1.12-1.12.17-4.8 on GA media

These are all security issues fixed in the go1.12-1.12.17-4.8 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10805-1
Updated
2026-11-02
OSVSUSE-SU-2019:0651-1 No score

Security update for go1.11

This update for go1.11 to version 1.11.5 fixes the following issues:

Security issue fixed:

  • CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 (bsc#1123013 go#29903).

Other bug fixes and changes made:

  • Fix erroneous trailing backslash in %post script.
  • Use better forms of -exec ; in some places.
Record
SUSE-SU-2019:0651-1
Updated
2026-11-02
OSVSUSE-SU-2019:1149-1 No score

Security update for go1.10

This update for go1.10 fixes the following issues:

Security issues fixed:

  • CVE-2019-6486: A CPU denial of service vulnerability affecting P-521 and P-384 elliptic curves was fixed.

Other fixes:

  • go1.10.8 (released 2019/01/23) security release fixes CVE-2019-6486.
  • Enable build for %arm (bsc#1125768), with go1.4 as building with gccgo hangs (bsc#974800)
Record
SUSE-SU-2019:1149-1
Updated
2026-11-02
OSVSUSE-SU-2019:1234-1 No score

Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

  • CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).
  • CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).
  • CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).
  • CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).
  • CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).

Other changes and bug fixes:

  • Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).
  • docker-test: Improvements to test packaging (bsc#1128746).
  • Move daemon.json file to /etc/docker directory (bsc#1114832).
  • Revert golang(API) removal since it turns out this breaks >= requires in certain cases (bsc#1114209).
  • Fix go build failures (bsc#1121397).
Record
SUSE-SU-2019:1234-1
Updated
2026-11-02
OSVSUSE-SU-2019:1234-2 No score

Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

  • CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967).
  • CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).
  • CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897).
  • CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).
  • CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).

Other changes and bug fixes:

  • Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068).
  • Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068).
  • docker-test: Improvements to test packaging (bsc#1128746).
  • Move daemon.json file to /etc/docker directory (bsc#1114832).
  • Revert golang(API) removal since it turns out this breaks >= requires in certain cases (bsc#1114209).
  • Fix go build failures (bsc#1121397).
Record
SUSE-SU-2019:1234-2
Updated
2026-11-02
OSVSUSE-SU-2019:1264-1 No score

Security update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork

This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues:

Security issues fixed:

  • CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013).
  • CVE-2018-16873: go security release, fixing cmd/go remote command execution (bsc#1118897).
  • CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898).
  • CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899).

Other changes and bug fixes:

  • Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, boo#1134068).
  • Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, boo#1134068).
  • Update to Docker 18.09.6-ce see upstream changelog in the packaged
  • Move daemon.json file to /etc/docker directory (bsc#1114832).
  • docker-test: Improvements to test packaging (bsc#1128746).
  • Update to go1.11.9 (released 2019/04/11)
  • Fix go build failures (bsc#1121397).
  • Update to golang-github-docker-libnetwork version git.872f0a83c98add6cae255c8859e29532febc0039 which is required for Docker v18.09.6-ce.
  • Revert golang(API) removal since it turns out this breaks >= requires in certain cases (bsc#1114209).
Record
SUSE-SU-2019:1264-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
go
Alpine:v3.10
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.11
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.12
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.13
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.14
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.15
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.16
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.17
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.18
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.19
 1.11.1 up to 1.11.5-r0
1.11.5-r0
Show 52 moreShow less
Affected packages
PackageAffectedFixed
go
Alpine:v3.20
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.21
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.22
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.23
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.24
 1.11.1 up to 1.11.5-r0
1.11.5-r0
go
Alpine:v3.8
 1.11.1 up to 1.10.8-r0
1.10.8-r0
go
Alpine:v3.9
 1.11.1 up to 1.11.5-r0
1.11.5-r0
golang
Azure Linux:3
 through 1.25.7-1 None known
golang
Azure Linux:3
 1.27.0 to 1.27.1-1 None known
golang
Debian:8
 before 2:1.3.3-1+deb8u1, plus listed versions
2:1.3.3-1
2:1.3.3-1+deb8u1
golang-1.7
Debian:9
From an advisory covering 2 CVEs
 before 1.7.4-2+deb9u1, plus listed versions
1.7.4-2
1.7.4-2+deb9u1
golang-1.8
Debian:9
From an advisory covering 3 CVEs
 before 1.8.1-1+deb9u1, plus listed versions
1.8.1-1
1.8.1-1+deb9u1
stdlib
Go
 before 1.10.8, 1.11.0-0 up to 1.11.5
1.10.81.11.5
golang
Mageia:6
From an advisory covering 4 CVEs
 before 1.11.5-1.mga6
1.11.5-1.mga6
containerd
SUSE:Linux Enterprise Module for Containers 15
From an advisory covering 5 CVEs
 before 1.2.5-5.13.1
1.2.5-5.13.1
docker
SUSE:Linux Enterprise Module for Containers 15
From an advisory covering 5 CVEs
 before 18.09.6_ce-6.17.1
18.09.6_ce-6.17.1
docker-runc
SUSE:Linux Enterprise Module for Containers 15
From an advisory covering 5 CVEs
 before 1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1
1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1
golang-github-docker-libnetwork
SUSE:Linux Enterprise Module for Containers 15
From an advisory covering 5 CVEs
 before 0.7.0.1+gitr2726_872f0a83c98a-4.12.1
0.7.0.1+gitr2726_872f0a83c98a-4.12.1
containerd
SUSE:Linux Enterprise Module for Containers 15 SP1
From an advisory covering 5 CVEs
 before 1.2.5-5.13.1
1.2.5-5.13.1
docker
SUSE:Linux Enterprise Module for Containers 15 SP1
From an advisory covering 5 CVEs
 before 18.09.6_ce-6.17.1
18.09.6_ce-6.17.1
docker-runc
SUSE:Linux Enterprise Module for Containers 15 SP1
From an advisory covering 5 CVEs
 before 1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1
1.0.0rc6+gitr3804_2b18fe1d885e-6.18.1
golang-github-docker-libnetwork
SUSE:Linux Enterprise Module for Containers 15 SP1
From an advisory covering 5 CVEs
 before 0.7.0.1+gitr2726_872f0a83c98a-4.12.1
0.7.0.1+gitr2726_872f0a83c98a-4.12.1
containerd
SUSE:Linux Enterprise Module for Containers 12
From an advisory covering 4 CVEs
 before 1.2.5-16.17.2
1.2.5-16.17.2
docker
SUSE:Linux Enterprise Module for Containers 12
From an advisory covering 4 CVEs
 before 18.09.6_ce-98.37.1
18.09.6_ce-98.37.1
docker-runc
SUSE:Linux Enterprise Module for Containers 12
From an advisory covering 4 CVEs
 before 1.0.0rc6+gitr3804_2b18fe1d885e-1.23.1
1.0.0rc6+gitr3804_2b18fe1d885e-1.23.1
golang-github-docker-libnetwork
SUSE:Linux Enterprise Module for Containers 12
From an advisory covering 4 CVEs
 before 0.7.0.1+gitr2726_872f0a83c98a-19.1
0.7.0.1+gitr2726_872f0a83c98a-19.1
golang-1.10
Ubuntu:14.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~14.04.1
 None known
golang-1.10
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.10.4-2ubuntu1~16.04.11.10.4-2ubuntu1~16.04.2
 None known
golang-1.6
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.6-0ubuntu11.6-0ubuntu21.6-0ubuntu31.6-0ubuntu41.6-0ubuntu5
Show 5 moreShow less
1.6.1-0ubuntu11.6.2-0ubuntu5~16.041.6.2-0ubuntu5~16.04.21.6.2-0ubuntu5~16.04.31.6.2-0ubuntu5~16.04.4
 None known
golang-1.10
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.10~rc1-11.10~rc1-1ubuntu11.10~rc1-2ubuntu11.10~rc2-1ubuntu11.10-1ubuntu11.10.1-1ubuntu21.10.4-2ubuntu1~18.04.11.10.4-2ubuntu1~18.04.2
 None known
golang-1.8
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.8.3-2ubuntu11.8.3-2ubuntu1.18.04.1
 None known
golang-1.9
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.9.1-2ubuntu11.9.2-1ubuntu11.9.2-3ubuntu11.9.3-1ubuntu11.9.4-1ubuntu1
 None known
go1.11
openSUSE:Leap 15.0
 before 1.11.5-lp150.6.4
1.11.5-lp150.6.4
containerd
openSUSE:Leap 15.1
From an advisory covering 5 CVEs
 before 1.2.5-lp151.2.3.1
1.2.5-lp151.2.3.1
docker
openSUSE:Leap 15.1
From an advisory covering 5 CVEs
 before 18.09.6_ce-lp151.2.3.1
18.09.6_ce-lp151.2.3.1
docker-runc
openSUSE:Leap 15.1
From an advisory covering 5 CVEs
 before 1.0.0rc6+gitr3804_2b18fe1d885e-lp151.3.3.1
1.0.0rc6+gitr3804_2b18fe1d885e-lp151.3.3.1
go
openSUSE:Leap 15.1
From an advisory covering 5 CVEs
 before 1.12-lp151.2.3.1
1.12-lp151.2.3.1
go1.11
openSUSE:Leap 15.1
From an advisory covering 5 CVEs
 before 1.11.9-lp151.2.3.1
1.11.9-lp151.2.3.1
go1.12
openSUSE:Leap 15.1
From an advisory covering 5 CVEs
 before 1.12.4-lp151.2.3.1
1.12.4-lp151.2.3.1
golang-github-docker-libnetwork
openSUSE:Leap 15.1
From an advisory covering 5 CVEs
 before 0.7.0.1+gitr2726_872f0a83c98a-lp151.2.3.1
0.7.0.1+gitr2726_872f0a83c98a-lp151.2.3.1
containerd
openSUSE:Leap 15.0
From an advisory covering 5 CVEs
 before 1.2.5-lp150.4.14.3
1.2.5-lp150.4.14.3
docker
openSUSE:Leap 15.0
From an advisory covering 5 CVEs
 before 18.09.6_ce-lp150.5.17.2
18.09.6_ce-lp150.5.17.2
docker-runc
openSUSE:Leap 15.0
From an advisory covering 5 CVEs
 before 1.0.0rc6+gitr3804_2b18fe1d885e-lp150.5.21.2
1.0.0rc6+gitr3804_2b18fe1d885e-lp150.5.21.2
go
openSUSE:Leap 15.0
From an advisory covering 5 CVEs
 before 1.12-lp150.2.11.1
1.12-lp150.2.11.1
go1.11
openSUSE:Leap 15.0
From an advisory covering 5 CVEs
 before 1.11.9-lp150.9.3
1.11.9-lp150.9.3
go1.12
openSUSE:Leap 15.0
From an advisory covering 5 CVEs
 before 1.12.4-lp150.2.2
1.12.4-lp150.2.2
golang-github-docker-libnetwork
openSUSE:Leap 15.0
From an advisory covering 5 CVEs
 before 0.7.0.1+gitr2726_872f0a83c98a-lp150.3.14.1
0.7.0.1+gitr2726_872f0a83c98a-lp150.3.14.1
go
SUSE:Package Hub 15
From an advisory covering 5 CVEs
 before 1.12-bp150.2.6.1
1.12-bp150.2.6.1
go
openSUSE:Tumbleweed
From an advisory covering 10 CVEs
 before 1.17-1.1
1.17-1.1
go1.10
openSUSE:Tumbleweed
From an advisory covering 12 CVEs
 before 1.10.8-8.2
1.10.8-8.2
go1.11
openSUSE:Tumbleweed
From an advisory covering 15 CVEs
 before 1.11.13-10.5
1.11.13-10.5
go1.12
openSUSE:Tumbleweed
From an advisory covering 18 CVEs
 before 1.12.17-4.8
1.12.17-4.8

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-6486 is a high vulnerability (CVSS 8.2) in Golang Go, published January 24, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.50%, the 91st percentile. Fixed in go 1.11.5-r0.

References

Show 62 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open