{"id":"CVE-2016-3959","aliases":["AZL-79052","AZL-98631","BELL-CVE-2016-3959","EUVD-2016-4968","GHSA-w7w7-9368-hffm","GO-2022-0166","MGASA-2016-0207","RHSA-2016:1538","UBUNTU-CVE-2016-3959","openSUSE-SU-2024:10028-1","openSUSE-SU-2024:10803-1","openSUSE-SU-2024:10804-1","openSUSE-SU-2024:10805-1","openSUSE-SU-2024:10812-1"],"status":"published","title":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not...","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.04358,"percentile":0.91307,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-20"],"published":"2016-05-23T19:00:00Z","modified":"2026-11-05T05:40:51Z","exploits":[{"source":"pocgithub","id":"alexmullins/dsa","title":"alexmullins/dsa","date":"2016-04-10","url":"https://github.com/alexmullins/dsa"}],"fixes":[{"ecosystem":"Go","package":"stdlib","fixed_in":["1.5.4","1.6.1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"golang","fixed_in":["1.6.2-7.mga5"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"1.26.10-1"}]}]},{"source":"osv","ecosystem":"Azure Linux:3","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.27.0"},{"last_affected":"1.27.1-1"}]}]},{"source":"osv","ecosystem":"Go","package":"stdlib","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.5.4"},{"introduced":"1.6.0-0"},{"fixed":"1.6.1"}]}]},{"source":"osv","ecosystem":"Mageia:5","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.2-7.mga5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"golang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el7_2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"golang-bin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el7_2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"golang-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el7_2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"golang-misc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el7_2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"golang-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el7_2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"golang-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el7_2.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.0-2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.10","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.8-8.2"}]}],"bundled":12},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.13-10.5"}]}],"bundled":15},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.12","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.17-4.8"}]}],"bundled":18},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"go1.9","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.7-11.2"}]}],"bundled":9}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"golang","product":"go"},{"vendor":"opensuse","product":"leap"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2016/04/05/2","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://go-review.googlesource.com/#/c/21533/","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2016-1538.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/182526.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://groups.google.com/forum/#%21topic/golang-announce/9eqIHqaWvck","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183106.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2016-05/msg00077.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2016/04/05/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183137.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3959","tags":["web","advisory"]},{"url":"https://groups.google.com/forum/#!topic/golang-announce/9eqIHqaWvck"},{"url":"https://go-review.googlesource.com/#/c/21533"},{"url":"https://github.com/advisories/GHSA-w7w7-9368-hffm"},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-3959","tags":["advisory"]},{"url":"https://go.dev/cl/21533","tags":["fix"]},{"url":"https://go.googlesource.com/go/+/eb876dd83cb8413335d64e50aae5d38337d1ebb4","tags":["fix"]},{"url":"https://go.dev/issue/15184","tags":["report"]},{"url":"https://groups.google.com/g/golang-announce/c/9eqIHqaWvck","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2016-0207.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=18482","tags":["report"]},{"url":"https://lists.opensuse.org/opensuse-updates/2016-05/msg00077.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1538","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1346331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1353798","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1538.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5739","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1250352","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5739","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5739","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5740","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5740","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-5741","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-5741","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-5741","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-3959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1324343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3959","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-5386","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5386","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5386","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2016-3959","tags":["report"]},{"url":"https://golang.org/cl/21533","tags":["report"]},{"url":"http://seclists.org/oss-sec/2016/q2/11","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7189","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8618","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3959","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15041","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-15042","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2017-8932","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16873","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16874","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-16875","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-6574","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-6486","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-14809","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9512","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-9514","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11888","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16276","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-17596","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7187","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-3959","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","status":"published","published":"2016-05-23T19:00:00Z","modified":"2024-08-06T00:10:31.95Z","updated_at":"2026-11-02T14:33:34.094161Z"}],"euvd":[{"id":"EUVD-2016-4968","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","status":"published","published":"2016-05-23T19:00:00Z","modified":"2024-08-06T00:10:31Z","updated_at":"2026-11-03T02:22:48.690835Z"}],"ghsa":[{"id":"GHSA-w7w7-9368-hffm","title":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not...","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","status":"published","published":"2022-05-14T02:12:12Z","modified":"2025-04-12T13:01:30Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:01:28.050499Z"}],"nvd":[{"id":"CVE-2016-3959","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","status":"published","published":"2016-05-23T19:59:04.477Z","modified":"2026-06-17T00:46:38.537Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:03:25.366449Z"}],"osv":[{"id":"AZL-79052","title":"CVE-2016-3959 affecting package golang 1.26.10-1","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","status":"published","published":"2016-05-23T19:59:04Z","modified":"2026-11-05T05:40:51Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-05T16:41:24.800038Z"},{"id":"AZL-98631","title":"CVE-2016-3959 affecting package golang 1.27.1-1","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","status":"published","published":"2016-05-23T19:59:04Z","modified":"2026-09-16T06:39:01Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:12.596039Z"},{"id":"BELL-CVE-2016-3959","title":"CVE-2016-3959 does not affect BellSoft software","status":"withdrawn","published":"2016-05-23T19:59:00Z","modified":"2026-01-26T09:46:13.858073Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:14.137943Z"},{"id":"CVE-2016-3959","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","status":"published","published":"2016-05-23T19:59:04.477Z","modified":"2026-10-24T10:30:22.630475726Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:02.454775Z"},{"id":"RHSA-2016:1538","title":"Red Hat Security Advisory: golang security, bug fix, and enhancement update","status":"published","published":"2024-09-15T23:33:06Z","modified":"2026-05-13T10:35:06.173042Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"UBUNTU-CVE-2016-3959","description":"The Verify function in crypto/dsa/dsa.go in Go before 1.5.4 and 1.6.x before 1.6.1 does not properly check parameters passed to the big integer library, which might allow remote attackers to cause a denial of service (infinite loop) via a crafted public key to a program that uses HTTPS client certificates or SSH server libraries.","status":"withdrawn","published":"2016-05-23T19:59:00Z","modified":"2025-07-16T07:34:27.095105Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:12.261906Z"},{"id":"GO-2022-0166","title":"Denial of service due to unchecked parameters in crypto/dsa","description":"The Verify function in crypto/dsa passed certain parameters unchecked to the underlying big integer library, possibly leading to extremely long-running computations, which in turn makes Go programs vulnerable to remote denial of service attacks. Programs using HTTPS client certificates or the Go SSH server libraries are both exposed to this vulnerability.","status":"published","published":"2022-05-24T22:06:33Z","modified":"2024-05-20T16:03:47Z","updated_at":"2026-11-02T15:47:00.604718Z"},{"id":"MGASA-2016-0207","title":"Updated golang package fixes CVE-2016-3959","description":"Updated golang packages fix security vulnerability:\n\nGo has an infinite loop in several big integer routines that makes\nGo programs vulnerable to remote denial of service attacks. Programs\nusing HTTPS client authentication or the Go ssh server libraries are\nboth exposed to this vulnerability (CVE-2016-3959).\n","status":"published","published":"2016-05-23T22:00:58Z","modified":"2026-04-16T06:25:58.605009053Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10028-1","title":"go-1.7.0-2.1 on GA media","description":"These are all security issues fixed in the go-1.7.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:56:17.515798Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"openSUSE-SU-2024:10803-1","title":"go1.10-1.10.8-8.2 on GA media","description":"These are all security issues fixed in the go1.10-1.10.8-8.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:22:41.250328Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10804-1","title":"go1.11-1.11.13-10.5 on GA media","description":"These are all security issues fixed in the go1.11-1.11.13-10.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:13:47.136272Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10805-1","title":"go1.12-1.12.17-4.8 on GA media","description":"These are all security issues fixed in the go1.12-1.12.17-4.8 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:28:31.331263Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:10812-1","title":"go1.9-1.9.7-11.2 on GA media","description":"These are all security issues fixed in the go1.9-1.9.7-11.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:17:45.429147Z","updated_at":"2026-11-02T16:58:34.487567Z"}]}}