CVE-2019-11840

An issue was discovered in the supplementary Go cryptography library, golang.org/x/crypto, before v0.0.0-20190320223903-b7391e95e576. A flaw was found in the amd64 implementation of the golang.org/x/crypto/salsa20 and golang.org/x/crypto/salsa20/salsa packages. If more than 256 GiB of keystream is generated, or if the counter otherwise grows greater than 32 bits, the amd64 implementation will first generate incorrect output, and then cycle back to previously generated keystream. Repeated keystream bytes can lead to loss of confidentiality in encryption applications, or to predictability in CSPRNG applications.

• CWE-330

• https://bugzilla.redhat.com/show_bug.cgi?id=1691529Issue Tracking, Vendor Advisory
• https://github.com/golang/go/issues/30965Third Party Advisory
• https://go.googlesource.com/crypto/+/b7391e95e576cacdcdd422573063bc057239113dMailing List, Patch, Third Party Advisory
• https://groups.google.com/forum/#%21msg/golang-announce/tjyNcJxb2vQ/n0NRBziSCAAJPermissions Required
• https://lists.debian.org/debian-lts-announce/2019/06/msg00029.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00014.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/11/msg00016.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/11/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/01/msg00015.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/06/msg00017.htmlThird Party Advisory
• https://pkg.go.dev/vuln/GO-2022-0209Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1691529Issue Tracking, Vendor Advisory
• https://github.com/golang/go/issues/30965Third Party Advisory
• https://go.googlesource.com/crypto/+/b7391e95e576cacdcdd422573063bc057239113dMailing List, Patch, Third Party Advisory
• https://groups.google.com/forum/#%21msg/golang-announce/tjyNcJxb2vQ/n0NRBziSCAAJPermissions Required
• https://lists.debian.org/debian-lts-announce/2019/06/msg00029.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00014.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/11/msg00016.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/11/msg00030.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2021/01/msg00015.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2023/06/msg00017.htmlThird Party Advisory
• https://pkg.go.dev/vuln/GO-2022-0209Third Party Advisory

Published

May 9, 2019

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11835cJSON before 1.7.11 allows out-of-bounds access, related to …9.8
• CVE-2019-11836The Rediffmail (aka com.rediff.mail.and) application 2.2.6 f…
• CVE-2019-11837njs through 0.3.1, used in NGINX, has a segmentation fault i…
• CVE-2019-11838njs through 0.3.1, used in NGINX, has a heap-based buffer ov…
• CVE-2019-11839njs through 0.3.1, used in NGINX, has a heap-based buffer ov…
• CVE-2019-1184An elevation of privilege vulnerability exists when Windows …6.7
• CVE-2019-11841A message-forgery issue was discovered in crypto/openpgp/cle…5.9
• CVE-2019-11842An issue was discovered in Matrix Sydent before 1.0.3 and Sy…
• CVE-2019-11843The MailPoet plugin before 3.23.2 for WordPress allows remot…6.1
• CVE-2019-11844An HTML Injection vulnerability has been discovered on the R…
• CVE-2019-11845An HTML Injection vulnerability has been discovered on the R…
• CVE-2019-11846/servlets/ajax_file_upload?fieldName=binary3 in dotCMS 5.1.1…