CVE-2025-47914 - Vulnerability Details - OpenCVE

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00039.

Exploitation none

Automatable yes

Technical Impact partial

No data.

No data.

No data.

No data.

Advisories

Source	ID	Title
Github GHSA	GHSA-f6x5-jh6r-wrfv	golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://go.dev/cl/721960
https://go.dev/issue/76364
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
https://pkg.go.dev/vuln/GO-2025-4135

History

Thu, 20 Nov 2025 17:30:00 +0000

Type	Values Removed	Values Added
Title	CVE-2025-47914 in golang.org/x/crypto/ssh/agent	Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

Wed, 19 Nov 2025 21:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-125
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 19 Nov 2025 20:45:00 +0000

Type	Values Removed	Values Added
Description		SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Title		CVE-2025-47914 in golang.org/x/crypto/ssh/agent
References		https://go.dev/cl/721960 https://go.dev/issue/76364 https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA https://pkg.go.dev/vuln/GO-2025-4135

MITRE

Status: PUBLISHED

Assigner: Go

Published: 2025-11-19T20:33:43.126Z

Updated: 2025-11-20T17:15:00.344Z

Reserved: 2025-05-13T23:31:29.597Z

Link: CVE-2025-47914

Vulnrichment

Updated: 2025-11-19T20:50:22.359Z

NVD

Status : Received

Published: 2025-11-19T21:15:50.517

Modified: 2025-11-19T21:15:50.517

Link: CVE-2025-47914

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-47914", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "state": "PUBLISHED", "assignerShortName": "Go", "dateReserved": "2025-05-13T23:31:29.597Z", "datePublished": "2025-11-19T20:33:43.126Z", "dateUpdated": "2025-11-20T17:15:00.344Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2025-11-20T17:15:00.344Z"}, "title": "Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent", "descriptions": [{"lang": "en", "value": "SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read."}], "affected": [{"vendor": "golang.org/x/crypto", "product": "golang.org/x/crypto/ssh/agent", "collectionURL": "https://pkg.go.dev", "packageName": "golang.org/x/crypto/ssh/agent", "versions": [{"version": "0", "lessThan": "0.45.0", "status": "affected", "versionType": "semver"}], "programRoutines": [{"name": "parseConstraints"}, {"name": "ForwardToAgent"}, {"name": "ServeAgent"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-237"}]}], "references": [{"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"}, {"url": "https://go.dev/cl/721960"}, {"url": "https://go.dev/issue/76364"}, {"url": "https://pkg.go.dev/vuln/GO-2025-4135"}], "credits": [{"lang": "en", "value": "Jakub Ciolek"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-125", "lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-11-19T20:50:27.263405Z", "id": "CVE-2025-47914", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-19T20:50:30.968Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-47914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-19T20:50:27.263405Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-19T20:50:22.359Z"}}], "cna": {"title": "Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent", "credits": [{"lang": "en", "value": "Jakub Ciolek"}], "affected": [{"vendor": "golang.org/x/crypto", "product": "golang.org/x/crypto/ssh/agent", "versions": [{"status": "affected", "version": "0", "lessThan": "0.45.0", "versionType": "semver"}], "packageName": "golang.org/x/crypto/ssh/agent", "collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected", "programRoutines": [{"name": "parseConstraints"}, {"name": "ForwardToAgent"}, {"name": "ServeAgent"}]}], "references": [{"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"}, {"url": "https://go.dev/cl/721960"}, {"url": "https://go.dev/issue/76364"}, {"url": "https://pkg.go.dev/vuln/GO-2025-4135"}], "descriptions": [{"lang": "en", "value": "SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-237"}]}], "providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2025-11-20T17:15:00.344Z"}}}, "cveMetadata": {"cveId": "CVE-2025-47914", "state": "PUBLISHED", "dateUpdated": "2025-11-20T17:15:00.344Z", "dateReserved": "2025-05-13T23:31:29.597Z", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "datePublished": "2025-11-19T20:33:43.126Z", "assignerShortName": "Go"}, "dataVersion": "5.2"}