Описание
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-go.crypto | fixed | 1:0.43.0-1 | package | |
| golang-go.crypto | postponed | bullseye | package |
Примечания
https://github.com/advisories/GHSA-56w8-48fp-6mgv
https://go-review.googlesource.com/c/crypto/+/700295
https://github.com/golang/go/issues/75178
Fixed by: https://github.com/golang/crypto/commit/559e062ce8bfd6a39925294620b50906ca2a6f95 (v0.43.0)
EPSS
Связанные уязвимости
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
Potential denial of service in golang.org/x/crypto/ssh/agent
EPSS