Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-F87F78376FBF3CE972F07B249EED8845HistoryFeb 20, 2020 - 12:00 a.m.
Improper Verification of Cryptographic Signature
2020-02-2000:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
15
0.244 Low
EPSS
Percentile
96.6%
golang.org/x/crypto allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go/golang.org/x/crypto | eq | 0.0.0-20200220183623-bac4c82f6975 |
Related
openvas
openvas
Debian: Security Advisory (DLA-2453-1)
2020-11-17 00:00:00
Debian: Security Advisory (DLA-2455-1)
2020-11-19 00:00:00
Debian: Security Advisory (DLA-3455-1)
2023-06-19 00:00:00
debian
debian
[SECURITY] [DLA 2455-1] packer security update
2020-11-18 21:02:24
[SECURITY] [DLA 2453-1] restic security update
2020-11-16 21:49:41
[SECURITY] [DLA 3455-1] golang-go.crypto security update
2023-06-16 21:31:09
exploitpack
exploitpack
Go SSH servers 0.0.2 - Denial of Service (PoC)
2020-02-24 00:00:00
nessus
nessus
Debian DLA-2455-1 : packer security update
2020-11-19 00:00:00
Debian DLA-2453-1 : restic security update
2020-11-17 00:00:00
Debian DLA-2402-1 : golang-go.crypto security update
2020-10-08 00:00:00
debiancve
debiancve
CVE-2020-9283
2020-02-20 20:15:10
cvelist
cvelist
CVE-2020-9283
2020-02-20 00:00:00
redhat
redhat
checkpoint_advisories
checkpoint_advisories
Google Golang Crypto Denial of Service (CVE-2020-9283)
2020-10-25 00:00:00
archlinux
archlinux
[ASA-202003-4] golang-golang-x-crypto: denial of service
2020-03-08 00:00:00
cve
cve
CVE-2020-9283
2020-02-20 20:15:10
githubexploit
githubexploit
ibm
ibm
github
github
Improper Verification of Cryptographic Signature in golang.org/x/crypto
2021-05-18 15:29:31
osv
osv
Panic due to improper verification of cryptographic signatures in golang.org/x/crypto/ssh
2021-04-14 20:04:52
packer - security update
2020-11-19 00:00:00
restic - security update
2020-11-17 00:00:00
redhatcve
redhatcve
CVE-2020-9283
2021-08-15 06:09:30
cgr
cgr
CVE-2020-9283 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Signature Verification With Malformed Public Keys
2020-02-21 05:23:31
zdt
zdt
Go SSH servers 0.0.2 - Denial of Service Exploit
2020-02-24 00:00:00
hackerone
hackerone
Sifchain: SSH server due to Improper Signature Verification
2021-08-06 17:07:57
wolfi
wolfi
CVE-2020-9283 vulnerabilities
2024-07-05 21:08:40
packetstorm
packetstorm
Go SSH 0.0.2 Denial Of Service
2020-02-23 00:00:00
ubuntucve
ubuntucve
CVE-2020-9283
2020-02-20 00:00:00
nvd
nvd
CVE-2020-9283
2020-02-20 20:15:10
prion
prion
Code injection
2020-02-20 20:15:00
exploitdb
exploitdb
Go SSH servers 0.0.2 - Denial of Service (PoC)
2020-02-24 00:00:00