Lucene search
GoogleOSV:GO-2020-0012HistoryApr 14, 2021 - 8:04 p.m.
Panic due to improper verification of cryptographic signatures in golang.org/x/crypto/ssh
2021-04-1420:04:52
Google
osv.dev
9
0.244 Low
EPSS
Percentile
96.6%
An attacker can craft an ssh-ed25519 or [email protected] public key, such that the library will panic when trying to verify a signature with it. If verifying signatures using user supplied public keys, this may be used as a denial of service vector.
| CPE | Name | Operator | Version |
|---|---|---|---|
| golang.org/x/crypto | lt | 0.0.0-20200220183623-bac4c82f6975 |
Related
openvas
openvas
Debian: Security Advisory (DLA-2453-1)
2020-11-17 00:00:00
Debian: Security Advisory (DLA-2455-1)
2020-11-19 00:00:00
Debian: Security Advisory (DLA-2402-1)
2020-10-08 00:00:00
debian
debian
[SECURITY] [DLA 2455-1] packer security update
2020-11-18 21:02:24
[SECURITY] [DLA 2453-1] restic security update
2020-11-16 21:49:41
[SECURITY] [DLA 3455-1] golang-go.crypto security update
2023-06-16 21:31:09
exploitpack
exploitpack
Go SSH servers 0.0.2 - Denial of Service (PoC)
2020-02-24 00:00:00
nessus
nessus
Debian DLA-2455-1 : packer security update
2020-11-19 00:00:00
Debian DLA-2453-1 : restic security update
2020-11-17 00:00:00
Debian DLA-2402-1 : golang-go.crypto security update
2020-10-08 00:00:00
debiancve
debiancve
CVE-2020-9283
2020-02-20 20:15:10
cvelist
cvelist
CVE-2020-9283
2020-02-20 00:00:00
redhat
redhat
ibm
ibm
cgr
cgr
CVE-2020-9283 vulnerabilities
2024-05-19 03:07:16
osv
osv
restic - security update
2020-11-17 00:00:00
packer - security update
2020-11-19 00:00:00
Improper Verification of Cryptographic Signature in golang.org/x/crypto
2021-05-18 15:29:31
veracode
veracode
Signature Verification With Malformed Public Keys
2020-02-21 05:23:31
zdt
zdt
Go SSH servers 0.0.2 - Denial of Service Exploit
2020-02-24 00:00:00
hackerone
hackerone
Sifchain: SSH server due to Improper Signature Verification
2021-08-06 17:07:57
wolfi
wolfi
CVE-2020-9283 vulnerabilities
2024-07-05 21:08:40
checkpoint_advisories
checkpoint_advisories
Google Golang Crypto Denial of Service (CVE-2020-9283)
2020-10-25 00:00:00
cve
cve
CVE-2020-9283
2020-02-20 20:15:10
githubexploit
githubexploit
archlinux
archlinux
[ASA-202003-4] golang-golang-x-crypto: denial of service
2020-03-08 00:00:00
github
github
Improper Verification of Cryptographic Signature in golang.org/x/crypto
2021-05-18 15:29:31
redhatcve
redhatcve
CVE-2020-9283
2021-08-15 06:09:30
packetstorm
packetstorm
Go SSH 0.0.2 Denial Of Service
2020-02-23 00:00:00
ubuntucve
ubuntucve
CVE-2020-9283
2020-02-20 00:00:00
nvd
nvd
CVE-2020-9283
2020-02-20 20:15:10
prion
prion
Code injection
2020-02-20 20:15:00
gitlab
gitlab
Improper Verification of Cryptographic Signature
2020-02-20 00:00:00
exploitdb
exploitdb
Go SSH servers 0.0.2 - Denial of Service (PoC)
2020-02-24 00:00:00