https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Tue, 18 Aug 2026 14:18:15 +0000 https://vulnerability.circl.lu/sighting/f581bdaf-e300-4910-97d1-4a123566f24e/export {"uuid": "f581bdaf-e300-4910-97d1-4a123566f24e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MPWR-8VM7-H73F", "type": "seen", "source": "https://gist.github.com/alon710/2b9e0ac9d204b77b1b6db1f2d326bdfa", "content": "# GHSA-MPWR-8VM7-H73F: GHSA-mpwr-8vm7-h73f: Key Space Collapse and Authentication Bypass in go-pkcs12 PBMAC1 Decoding\n\n> **CVSS Score:** 7.4\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/GHSA-MPWR-8VM7-H73F\n\n## Summary\nA security vulnerability in the Go library software.sslmate.com/src/go-pkcs12 allows remote attackers to bypass password-based integrity verification. By crafting a PKCS#12 file with an excessively short KeyLength parameter in the PBMAC1 configuration, the derived MAC key space collapses, allowing an attacker to forge arbitrary certificate structures and private keys that are incorrectly verified as valid.\n\n## TL;DR\nAn authentication and integrity bypass flaw in go-pkcs12 allows attackers to forge PKCS#12 files by configuring a 1-byte PBMAC1 key length, collapsing the validation keyspace to 256 possibilities.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-354\n- **Attack Vector**: Network\n- **CVSS v3.1 Severity**: 7.4 (High)\n- **EPSS Score**: 0.00235\n- **Exploit Status**: Proof of Concept / Theoretical\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- software.sslmate.com/src/go-pkcs12\n- **go-pkcs12**: >= 0.6.0, < 0.7.2 (Fixed in: `0.7.2`)\n\n## Mitigation\n\n- Upgrade the go-pkcs12 dependency to version v0.7.2 or higher.\n- Implement client-side or boundary checks to inspect the ASN.1 structure of PKCS#12 containers before processing.\n- Enforce API rate-limiting on endpoints that ingest and parse PKCS#12 files to mitigate multi-attempt brute-force attacks.\n\n**Remediation Steps:**\n1. Open your Go project's terminal.\n2. Run the command: `go get -u software.sslmate.com/src/go-pkcs12@v0.7.2`\n3. Execute `go mod tidy` to clean up dependencies and update the `go.sum` file.\n4. Verify deployment using `govulncheck ./...` to confirm the vulnerability is no longer reported.\n\n## References\n\n- [GitHub Advisory GHSA-mpwr-8vm7-h73f](https://github.com/advisories/GHSA-mpwr-8vm7-h73f)\n- [SSLMate Security Advisory](https://github.com/SSLMate/go-pkcs12/security/advisories/GHSA-mpwr-8vm7-h73f)\n- [Fix Commit 03c441f6b0267f695ca02464133c0b373bf4dd55](https://github.com/SSLMate/go-pkcs12/commit/03c441f6b0267f695ca02464133c0b373bf4dd55)\n- [OpenSSL Security Advisory (2026-06-09)](https://openssl-library.org/news/secadv/20260609.txt)\n- [OpenSSL Vulnerability CVE-2026-34181](https://openssl-library.org/news/vulnerabilities/#CVE-2026-34181)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-MPWR-8VM7-H73F) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T06:31:46.945788Z"} {"uuid": "f581bdaf-e300-4910-97d1-4a123566f24e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-MPWR-8VM7-H73F", "type": "seen", "source": "https://gist.github.com/alon710/2b9e0ac9d204b77b1b6db1f2d326bdfa", "content": "# GHSA-MPWR-8VM7-H73F: GHSA-mpwr-8vm7-h73f: Key Space Collapse and Authentication Bypass in go-pkcs12 PBMAC1 Decoding\n\n> **CVSS Score:** 7.4\n> **Published:** 2026-08-17\n> **Full Report:** https://cvereports.com/reports/GHSA-MPWR-8VM7-H73F\n\n## Summary\nA security vulnerability in the Go library software.sslmate.com/src/go-pkcs12 allows remote attackers to bypass password-based integrity verification. By crafting a PKCS#12 file with an excessively short KeyLength parameter in the PBMAC1 configuration, the derived MAC key space collapses, allowing an attacker to forge arbitrary certificate structures and private keys that are incorrectly verified as valid.\n\n## TL;DR\nAn authentication and integrity bypass flaw in go-pkcs12 allows attackers to forge PKCS#12 files by configuring a 1-byte PBMAC1 key length, collapsing the validation keyspace to 256 possibilities.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-354\n- **Attack Vector**: Network\n- **CVSS v3.1 Severity**: 7.4 (High)\n- **EPSS Score**: 0.00235\n- **Exploit Status**: Proof of Concept / Theoretical\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- software.sslmate.com/src/go-pkcs12\n- **go-pkcs12**: >= 0.6.0, < 0.7.2 (Fixed in: `0.7.2`)\n\n## Mitigation\n\n- Upgrade the go-pkcs12 dependency to version v0.7.2 or higher.\n- Implement client-side or boundary checks to inspect the ASN.1 structure of PKCS#12 containers before processing.\n- Enforce API rate-limiting on endpoints that ingest and parse PKCS#12 files to mitigate multi-attempt brute-force attacks.\n\n**Remediation Steps:**\n1. Open your Go project's terminal.\n2. Run the command: `go get -u software.sslmate.com/src/go-pkcs12@v0.7.2`\n3. Execute `go mod tidy` to clean up dependencies and update the `go.sum` file.\n4. Verify deployment using `govulncheck ./...` to confirm the vulnerability is no longer reported.\n\n## References\n\n- [GitHub Advisory GHSA-mpwr-8vm7-h73f](https://github.com/advisories/GHSA-mpwr-8vm7-h73f)\n- [SSLMate Security Advisory](https://github.com/SSLMate/go-pkcs12/security/advisories/GHSA-mpwr-8vm7-h73f)\n- [Fix Commit 03c441f6b0267f695ca02464133c0b373bf4dd55](https://github.com/SSLMate/go-pkcs12/commit/03c441f6b0267f695ca02464133c0b373bf4dd55)\n- [OpenSSL Security Advisory (2026-06-09)](https://openssl-library.org/news/secadv/20260609.txt)\n- [OpenSSL Vulnerability CVE-2026-34181](https://openssl-library.org/news/vulnerabilities/#CVE-2026-34181)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/GHSA-MPWR-8VM7-H73F) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-18T06:31:46.945788Z"} https://vulnerability.circl.lu/sighting/f581bdaf-e300-4910-97d1-4a123566f24e/export Tue, 18 Aug 2026 06:31:46 +0000