VulnerabilityModified

CVE-2026-39829

The RSA and DSA public key parsers did not enforce size limits on key parameters.

HIGH 7.5EPSS 0.47%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.47%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.47% probability · 39th percentile
CISA KEV: Not listed
Weakness: CWE-347, CWE-1284
Affected: golang/crypto
Source: security@golang.org

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.