CVE-2014-7189
golang go: no CVSS score yet. EPSS 1.4% chance of exploitation in the next 30 days. Fixed in stdlib 1.3.2.
crpyto/tls in Go 1.1 before 1.3.2, when SessionTicketsDisabled is enabled, allows man-in-the-middle attackers to spoof clients via unspecified vectors.
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- CWE
- CWE-264
- Published
- Modified
- Record from
- the NVD, synced
Affected
- golang:go
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GO-2021-0154 | Go | stdlib | >=1.1.0-0 <1.3.2 | 1.3.2 |