CVE-2019-11840
golang.org/x/crypto/salsa20/salsa uses insufficiently random values
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
- Record
CVE-2019-11840- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-330
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
- Record
CVE-2019-11840- Updated
- 2026-11-02
EUVDEUVD-2022-5096 No score
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
- Record
EUVD-2022-5096- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5c5-pr8j-pfp7
golang.org/x/crypto/salsa20/salsa uses insufficiently random values
An issue was discovered in supplementary Go cryptography libraries, aka golang-googlecode-go-crypto, before 2019-03-20. A flaw was found in the amd64 implementation of golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
Specific Go Packages Affected
golang.org/x/crypto/salsa20/salsa
- Record
GHSA-r5c5-pr8j-pfp7- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-330
- Updated
- 2026-11-02
OSV
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
- Record
CVE-2019-11840- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVDEBIAN-CVE-2019-11840
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
- Record
DEBIAN-CVE-2019-11840- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
Show 5 moreShow less
OSVGHSA-r5c5-pr8j-pfp7
golang.org/x/crypto/salsa20/salsa uses insufficiently random values
An issue was discovered in supplementary Go cryptography libraries, aka golang-googlecode-go-crypto, before 2019-03-20. A flaw was found in the amd64 implementation of golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
Specific Go Packages Affected
golang.org/x/crypto/salsa20/salsa
- Record
GHSA-r5c5-pr8j-pfp7- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-330
- Updated
- 2026-11-02
OSVRHBA-2020:0063
Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3 RPM release advisory
- Record
RHBA-2020:0063- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2021:0079
Red Hat Security Advisory: OpenShift Container Platform 3.11.374 bug fix and security update
- Record
RHSA-2021:0079- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-11840
An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
- Record
UBUNTU-CVE-2019-11840- CVSS 3.1
- 5.9 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVGO-2022-0209 No score
Insufficiently random values in golang.org/x/crypto/salsa20
XORKeyStream generates incorrect and insecure output for very large inputs.
If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.
The issue might affect uses of golang.org/x/crypto/nacl with extremely large messages.
Architectures other than amd64 and uses that generate less than 256 GiB of keystream for a single salsa20.XORKeyStream invocation are unaffected.
- Record
GO-2022-0209- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
golang.org/x/cryptoGo |
before 0.0.0-20190320223903-b7391e95e576 | 0.0.0-20190320223903-b7391e95e576 |
golang-go.cryptoDebian:12 |
before 1:0.0~git20200221.2aa609c-1 | 1:0.0~git20200221.2aa609c-1 |
golang-go.cryptoDebian:13 |
before 1:0.0~git20200221.2aa609c-1 | 1:0.0~git20200221.2aa609c-1 |
golang-go.cryptoDebian:14 |
before 1:0.0~git20200221.2aa609c-1 | 1:0.0~git20200221.2aa609c-1 |
golang-go.cryptoDebian:8 |
before 0.0~hg190-1+deb8u1, plus listed versions 0.0~hg190-1 |
0.0~hg190-1+deb8u1 |
golang-go.cryptoDebian:9 From an advisory covering 3 CVEs |
before 1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1+deb8u1, plus listed versions 1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1 |
1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1+deb8u1 |
obfs4proxyDebian:9 |
before 0.0.7-1+deb8u1, plus listed versions 0.0.7-1 |
0.0.7-1+deb8u1 |
rcloneDebian:9 |
before 1.35-1+deb8u1, plus listed versions 1.35-1 |
1.35-1+deb8u1 |
snapdDebian:9 |
before 2.21-2+deb9u1, plus listed versions 2.21-2 |
2.21-2+deb9u1 |
golang-go.cryptoDebian:10 From an advisory covering 3 CVEs |
before 1:0.0~git20181203.505ab14-1+deb10u1, plus listed versions 1:0.0~git20181203.505ab14-1 |
1:0.0~git20181203.505ab14-1+deb10u1 |
Show 48 moreShow less
| Package | Affected | Fixed |
|---|---|---|
jenkinsRed Hat:openshift:4.3::el7 From an advisory covering 7 CVEs |
before 0:2.204.1.1578490170-1.el7 | 0:2.204.1.1578490170-1.el7 |
openshiftRed Hat:openshift:4.3::el7 From an advisory covering 7 CVEs |
before 0:4.3.0-202001131753.git.0.0aee6a8.el7 | 0:4.3.0-202001131753.git.0.0aee6a8.el7 |
openshift-hyperkubeRed Hat:openshift:4.3::el7 From an advisory covering 7 CVEs |
before 0:4.3.0-202001131753.git.0.0aee6a8.el7 | 0:4.3.0-202001131753.git.0.0aee6a8.el7 |
openshiftRed Hat:openshift:4.3::el8 From an advisory covering 7 CVEs |
before 0:4.3.0-202001131753.git.0.0aee6a8.el8 | 0:4.3.0-202001131753.git.0.0aee6a8.el8 |
openshift-hyperkubeRed Hat:openshift:4.3::el8 From an advisory covering 7 CVEs |
before 0:4.3.0-202001131753.git.0.0aee6a8.el8 | 0:4.3.0-202001131753.git.0.0aee6a8.el8 |
atomic-enterprise-service-catalogRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 1:3.11.374-1.git.1675.738abcc.el7 | 1:3.11.374-1.git.1675.738abcc.el7 |
atomic-enterprise-service-catalog-svcatRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 1:3.11.374-1.git.1675.738abcc.el7 | 1:3.11.374-1.git.1675.738abcc.el7 |
atomic-openshiftRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-clientsRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-clients-redistributableRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-cluster-autoscalerRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.2996f62.el7 | 0:3.11.374-1.git.0.2996f62.el7 |
atomic-openshift-deschedulerRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.299.f128e96.el7 | 0:3.11.374-1.git.299.f128e96.el7 |
atomic-openshift-docker-excluderRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-dockerregistryRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.481.e6a880c.el7 | 0:3.11.374-1.git.481.e6a880c.el7 |
atomic-openshift-excluderRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-hyperkubeRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-hypershiftRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-masterRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-metrics-serverRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.53.9df25a9.el7 | 0:3.11.374-1.git.53.9df25a9.el7 |
atomic-openshift-nodeRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-node-problem-detectorRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.263.28335fb.el7 | 0:3.11.374-1.git.263.28335fb.el7 |
atomic-openshift-podRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-sdn-ovsRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-service-idlerRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.15.523a1f7.el7 | 0:3.11.374-1.git.15.523a1f7.el7 |
atomic-openshift-template-service-brokerRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-testsRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.ebd3ee9.el7 | 0:3.11.374-1.git.0.ebd3ee9.el7 |
atomic-openshift-web-consoleRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.647.9e78d83.el7 | 0:3.11.374-1.git.647.9e78d83.el7 |
golang-github-openshift-oauth-proxyRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.439.966c536.el7 | 0:3.11.374-1.git.439.966c536.el7 |
golang-github-prometheus-alertmanagerRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.3abd2a5.el7 | 0:3.11.374-1.git.0.3abd2a5.el7 |
golang-github-prometheus-node_exporterRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.1062.490d6d5.el7 | 0:3.11.374-1.git.1062.490d6d5.el7 |
golang-github-prometheus-prometheusRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.5026.29379c4.el7 | 0:3.11.374-1.git.5026.29379c4.el7 |
openshift-enterprise-autohealRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.218.9cf7939.el7 | 0:3.11.374-1.git.218.9cf7939.el7 |
openshift-enterprise-cluster-capacityRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.379.80bd08f.el7 | 0:3.11.374-1.git.379.80bd08f.el7 |
prometheusRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.5026.29379c4.el7 | 0:3.11.374-1.git.5026.29379c4.el7 |
prometheus-alertmanagerRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.0.3abd2a5.el7 | 0:3.11.374-1.git.0.3abd2a5.el7 |
prometheus-node-exporterRed Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:3.11.374-1.git.1062.490d6d5.el7 | 0:3.11.374-1.git.1062.490d6d5.el7 |
python-urllib3Red Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:1.26.2-1.el7 | 0:1.26.2-1.el7 |
python2-urllib3Red Hat:openshift:3.11::el7 From an advisory covering 3 CVEs |
before 0:1.26.2-1.el7 | 0:1.26.2-1.el7 |
golang-go.cryptoUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1:0.0~git20150608-11:0.0~git20151201.0.7b85b09-21:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm11:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm21:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3 |
None known |
snapdUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.91.9.1.11.9.22.02.0.1 Show 45 moreShow less2.0.22.0.32.0.52.0.82.0.92.0.102.11+0.16.042.12+0.16.042.132.14.2~16.042.15.2ubuntu12.16ubuntu32.17.1ubuntu12.20.1ubuntu12.212.22.22.22.32.22.62.23.12.24.12.252.26.102.27.52.28.52.29.4.22.32.3.22.32.92.33.1ubuntu22.34.22.34.2ubuntu0.12.37.42.37.4ubuntu0.12.382.39.22.39.2ubuntu0.22.402.42.12.45.12.45.1ubuntu0.22.46.12.47.12.482.48.32.54.3+16.04~esm22.54.3+16.04.0ubuntu0.1~esm3 |
None known |
snapdUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2.28.5+17.102.29.4.1+18.042.29.4.2+18.042.31.1+18.042.32+18.04~pre5 Show 37 moreShow less2.32+18.04~pre62.32+18.042.32.3.2+18.042.32.5+18.042.32.8+18.042.32.9+18.042.33.1+18.04ubuntu22.34.2+18.042.34.2+18.04.12.37.1+18.042.37.1.1+18.042.37.4+18.042.37.4+18.04.12.38+18.042.39.2+18.042.40+18.042.42.1+18.042.45.1+18.042.45.1+18.04.22.46.1+18.042.47.1+18.042.48+18.042.48.3+18.042.49.2+18.042.51.1+18.042.54.2+18.04ubuntu12.54.3+18.042.54.3+18.04.2ubuntu0.12.54.3+18.04.2ubuntu0.22.55.5+18.042.57.5+18.042.57.5+18.04ubuntu0.12.58+18.042.58+18.04.12.61.4ubuntu0.18.04.1+esm12.61.4ubuntu0.18.04.1+esm22.61.4ubuntu0.18.04.1+esm4 |
None known |
golang-go.cryptoUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1:0.0~git20170629.0.5ef0053-1ubuntu11:0.0~git20170629.0.5ef0053-1ubuntu21:0.0~git20170629.0.5ef0053-21:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm11:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm21:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3 |
None known |
snapdUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.41+19.10.12.42.1+20.042.43.3+git1.8109f82.44~pre1+20.042.44+20.04 Show 30 moreShow less2.44.2+20.042.44.3+20.042.45.1+20.042.45.1+20.04.22.46.1+20.042.47.1+20.042.48+20.042.48.3+20.042.49.2+20.042.51.1+20.04ubuntu22.54.2+20.04ubuntu22.54.3+20.042.54.3+20.04.12.54.3+20.04.1ubuntu0.12.54.3+20.04.1ubuntu0.22.54.3+20.04.1ubuntu0.32.55.5+20.042.57.5+20.042.57.5+20.04ubuntu0.12.58+20.042.58+20.04.12.61.3+20.042.62+20.042.63+20.042.63+20.04ubuntu0.12.65.3+20.042.66.1+20.042.67.1+20.042.67.1+20.04ubuntu1~esm12.67.1+20.04ubuntu1~esm3 |
None known |
snapdUbuntu:22.04:LTS |
All versions, plus listed versions 2.53+21.10ubuntu12.54.2+22.04ubuntu12.54.2+22.04ubuntu22.54.2+22.04ubuntu32.54.3+git19.g868fc21+22.04 Show 31 moreShow less2.54.3+git26.g360067e+22.042.55.2+22.042.55.2+22.04.12.55.3+22.042.55.3+22.04ubuntu12.55.5+22.042.56.2+22.04ubuntu12.57.4+22.042.57.5+22.042.57.5+22.04ubuntu0.12.58+22.042.58+22.04.12.61.3+22.042.62+22.042.63+22.042.63+22.04ubuntu0.12.65.3+22.042.66.1+22.042.67.1+22.042.68.5+ubuntu22.04.12.71+ubuntu22.042.72+ubuntu22.042.73+ubuntu22.042.73+ubuntu22.04.12.74.1+ubuntu22.04.42.75.2+ubuntu22.042.76+ubuntu22.042.76+ubuntu22.04.12.76.3+ubuntu22.042.76.3+ubuntu22.04.12.77.1+ubuntu22.04.1 |
None known |
snapdUbuntu:24.04:LTS |
All versions, plus listed versions 2.60.4+23.102.61.3+24.042.62+24.04build12.63+24.042.63+24.04ubuntu0.1 Show 16 moreShow less2.63.1+24.042.65.3+24.042.66.1+24.042.67.1+24.042.68.5+ubuntu24.04.12.71+ubuntu24.042.72+ubuntu24.042.73+ubuntu24.042.73+ubuntu24.04.12.73+ubuntu24.04.22.74.1+ubuntu24.04.42.75.2+ubuntu24.042.76+ubuntu24.042.76+ubuntu24.04.12.76.3+ubuntu24.042.77.1+ubuntu24.04 |
None known |
snapdUbuntu:25.10 |
All versions, plus listed versions 2.67.1+25.042.68.5+ubuntu25.10.22.71+ubuntu25.102.71.1+ubuntu25.10.12.72+ubuntu25.10.2 Show 4 moreShow less2.73+ubuntu25.102.73+ubuntu25.10.12.74.1+ubuntu25.10.42.75.2+ubuntu25.10 |
None known |
snapdUbuntu:26.10 |
All versions, plus listed versions 2.74.1+ubuntu26.04.42.76+ubuntu26.10.12.76+ubuntu26.10.22.76.3+ubuntu26.102.77.1+ubuntu26.10.1 |
None known |
snapdUbuntu:26.04:LTS |
All versions, plus listed versions 2.71.1+ubuntu25.10.12.72+ubuntu26.04.12.73+ubuntu26.04.12.74+ubuntu26.042.74.1+ubuntu26.04 Show 7 moreShow less2.74.1+ubuntu26.04.32.74.1+ubuntu26.04.42.75.2+ubuntu26.04.22.76+ubuntu26.04.22.76+ubuntu26.04.32.76.3+ubuntu26.042.77.1+ubuntu26.04.2 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-11840 is a medium vulnerability (CVSS 5.9) in Golang Crypto, published May 9, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.45%, the 89th percentile. Fixed in golang.org/x/crypto 0.0.0-20190320223903-b7391e95e576.
References
groups.google.com/forum
bugzilla.redhat.com/show_bug.cgi?id=1691529
go.googlesource.com/crypto/+/b7391e95e576cacdcdd422573063bc057239113d
github.com/golang/go/issues/30965
lists.debian.org/debian-lts-announce/2019/06/msg00029.html
Show 58 moreShow less
pkg.go.dev/vuln/GO-2022-0209
nvd.nist.gov/vuln/detail/CVE-2019-11840
go.dev/cl/168406
security-tracker.debian.org/tracker/CVE-2019-11840
access.redhat.com/errata/RHBA-2020:0063
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0063.json
cve.org/CVERecord?id=CVE-2019-10401
blog.champtar.fr/K8S_MITM_LoadBalancer_ExternalIPs
ubuntu.com/security/CVE-2019-11840
Left out here: 6 versions. The JSON record has them.