CVE-2017-1000097 | BDVDB-2026-91234 Detail

Description#

On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://groups.google.com/forum/#%21msg/golang-dev/4NdLzS8sls8/uIz8QlnIBQAJ
https://go-review.googlesource.com/c/33721/
https://github.com/golang/go/issues/18141

Exploit#

No public exploit known

History#

Version 12017-10-04Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.