Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-39835

Опубликовано: 27 мая 2026
Источник: msrc
CVSS3: 5.3
EPSS Низкий

Описание

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

EPSS

Процентиль: 41%
0.00504
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.3
ubuntu
4 месяца назад

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVSS3: 7.5
redhat
4 месяца назад

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVSS3: 5.3
nvd
4 месяца назад

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVSS3: 5.3
debian
4 месяца назад

SSH servers which use CertChecker as a public key callback without set ...

CVSS3: 5.3
github
3 месяца назад

golang.org/x/crypto is vulnerable to invoking server panic during CheckHostKey/Authenticate flow

EPSS

Процентиль: 41%
0.00504
Низкий

5.3 Medium

CVSS3