Описание
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-go.crypto | fixed | 1:0.52.0-1 | package | |
| golang-go.crypto | no-dsa | trixie | package | |
| golang-go.crypto | postponed | bookworm | package | |
| golang-go.crypto | postponed | bullseye | package |
Примечания
https://www.openwall.com/lists/oss-security/2026/05/22/6
https://github.com/golang/go/issues/79596
EPSS
Процентиль: 35%
0.00412
Низкий
Связанные уязвимости
CVSS3: 5.3
ubuntu
4 месяца назад
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
CVSS3: 5.3
redhat
4 месяца назад
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
CVSS3: 5.3
nvd
4 месяца назад
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
CVSS3: 5.3
msrc
4 месяца назад
Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
EPSS
Процентиль: 35%
0.00412
Низкий