Vulnerabilities

TI-2021-19455 CVE-2021-43565 · GHSA-gwc9-m7rh-j2ww

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto…

LOW 35

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01193 Published 2022-09-06 Partial fix · 0.0.0-20211202192323-5770296d904e

TI-2022-10313 CVE-2022-27191 · GHSA-8c26-wmh5-6g9v

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go…

MEDIUM 40

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03963 Published 2022-03-18 Partial fix · 0.0.0-20220314234659-1baeb1ce4c0b CWE-327

TI-2020-17810 CVE-2020-29652 · GHSA-3vm4-22fp-5rfm

A nil pointer dereference in the golang.org/x/crypto/ssh component through…

LOW 39

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03179 Published 2020-12-17 Partial fix · 0.0.0-20201216223049-8b5274cf687f CWE-476

Vulnerabilities

Filters

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto…

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go…

A nil pointer dereference in the golang.org/x/crypto/ssh component through…