The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
Metrics
Affected Vendors & Products
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2022-1373 | The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey. |
Github GHSA |
GHSA-8c26-wmh5-6g9v | golang.org/x/crypto/ssh Denial of service via crafted Signer |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Sun, 08 Sep 2024 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Redhat acm
|
|
| CPEs | cpe:/a:redhat:acm:2.4::el8 cpe:/a:redhat:acm:2.5::el8 cpe:/a:redhat:acm:2.6::el8 |
|
| Vendors & Products |
Redhat acm
|
Mon, 19 Aug 2024 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| CPEs | cpe:/a:redhat:acm:2.5::el8 cpe:/a:redhat:acm:2.6::el8 |
|
| Vendors & Products |
Redhat acm
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-03T05:25:31.128Z
Reserved: 2022-03-15T00:00:00
Link: CVE-2022-27191
No data.
Status : Modified
Published: 2022-03-18T07:15:06.750
Modified: 2024-11-21T06:55:22.620
Link: CVE-2022-27191
OpenCVE Enrichment
No data.
EUVD
Github GHSA