Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4h4-gmj2-qvw2

Опубликовано: 25 июн. 2026
Источник: github
Github: Прошло ревью
CVSS3: 7.5

Описание

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

Пакеты

Наименование

golang.org/x/crypto

go
Затронутые версииВерсия исправления

< 0.52.0

0.52.0

EPSS

Процентиль: 38%
0.00473
Низкий

7.5 High

CVSS3

Дефекты

CWE-704

Связанные уязвимости

CVSS3: 7.5
ubuntu
2 месяца назад

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVSS3: 7.5
redhat
3 месяца назад

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVSS3: 7.5
nvd
2 месяца назад

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVSS3: 7.5
msrc
2 месяца назад

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

CVSS3: 7.5
debian
2 месяца назад

An incorrectly placed cast from bytes to int allowed for server-side p ...

EPSS

Процентиль: 38%
0.00473
Низкий

7.5 High

CVSS3

Дефекты

CWE-704