Lucene search
GoogleOSV:GO-2022-0968HistorySep 13, 2022 - 3:32 a.m.
Panic on malformed packets in golang.org/x/crypto/ssh
2022-09-1303:32:38
Google
osv.dev
21
golang
ssh
aes-gcm
chacha20poly1305
unauthenticated clients
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
36.0%
Unauthenticated clients can cause a panic in SSH servers.
When using AES-GCM or ChaCha20Poly1305, consuming a malformed packet which contains an empty plaintext causes a panic.
Related
osv
osv
x/crypto/ssh vulnerable to panic via malformed packets
2022-09-07 00:01:52
CGA-2ppg-47v6-f439
2024-06-06 12:21:37
CGA-r8cw-3rv5-559v
2024-06-06 12:29:17
suse
suse
Security update for containerd, docker (important)
2022-05-16 00:00:00
Security update for kafka (important)
2022-02-17 00:00:00
ibm
ibm
Security Bulletin: Platform Navigator and Automation Assets in IBM Cloud Pak for Integration are vulnerable to denial of service due to Go CVE-2021-43565
2022-08-08 10:11:17
veracode
veracode
Denial Of Service (DoS)
2022-04-13 00:42:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:0040-1)
2022-01-11 00:00:00
openSUSE: Security Advisory for kubevirt, (openSUSE-SU-2022:0040-1)
2022-02-01 00:00:00
openSUSE: Security Advisory for kubevirt, (openSUSE-SU-2022:0526-1)
2022-02-22 00:00:00
gitlab
gitlab
x/crypto/ssh vulnerable to panic via SSH server
2022-09-07 00:00:00
x/crypto/ssh vulnerable to panic via SSH server
2022-09-07 00:00:00
redhatcve
redhatcve
CVE-2021-43565
2022-04-30 13:10:01
nvd
nvd
CVE-2021-43565
2022-09-06 18:15:10
wolfi
wolfi
CVE-2021-43565 vulnerabilities
2024-10-01 21:13:23
prion
prion
Code injection
2022-09-06 18:15:00
cbl_mariner
cbl_mariner
cgr
cgr
CVE-2021-43565 vulnerabilities
2024-05-19 03:07:16
ubuntucve
ubuntucve
CVE-2021-43565
2022-09-06 00:00:00
debiancve
debiancve
CVE-2021-43565
2022-09-06 18:15:10
cvelist
cvelist
CVE-2021-43565
2022-09-06 17:03:42
cve
cve
CVE-2021-43565
2022-09-06 18:15:10
github
github
x/crypto/ssh vulnerable to panic via malformed packets
2022-09-07 00:01:52
amazon
amazon
Important: amazon-ssm-agent
2023-10-12 15:09:00
Important: amazon-ssm-agent
2023-08-31 22:30:00
Important: amazon-ssm-agent
2023-10-12 15:48:00
redhat
redhat
(RHSA-2022:1361) Important: Red Hat OpenShift Data Foundation 4.10.0 RPM security,enhancement&bugfix update
2022-04-13 15:16:03
(RHSA-2022:1372) Important: Red Hat OpenShift Data Foundation 4.10.0 enhancement, security & bug fix update
2022-04-13 18:44:45
(RHSA-2022:5188) Important: RHACS 3.69 security update
2022-06-24 19:39:26
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
36.0%
Related for OSV:GO-2022-0968