CVE-2023-29409
MediumSummary
A vulnerability in the Go crypto/tls library allows a DoS attack by sending extremely large RSA keys in certificate chains, causing high CPU usage during signature verification. The fix restricts RSA key sizes transmitted during handshakes to a maximum of 8192 bits.
Risk Assessment
An attacker can overload a server or client by sending specially crafted certificates with large RSA keys, leading to CPU exhaustion and potential denial of service (DoS).
Recommendation
Update the Go library to a patched version (e.g., Go 1.20.8 or later) that limits RSA key sizes to 8192 bits.
Original NVD description (English source)
Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to <= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three cer