Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2026-39835

Опубликовано: 27 мая 2026
Источник: msrc
CVSS3: 5.3
EPSS Низкий

Описание

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

EPSS

Процентиль: 43%
0.00504
Низкий

5.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 7.5
ubuntu
5 месяцев назад

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVSS3: 7.5
redhat
5 месяцев назад

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVSS3: 7.5
nvd
5 месяцев назад

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVSS3: 7.5
debian
5 месяцев назад

SSH servers which use CertChecker as a public key callback without set ...

CVSS3: 7.5
redos
около 1 месяца назад

Уязвимость golang-x-crypto

EPSS

Процентиль: 43%
0.00504
Низкий

5.3 Medium

CVSS3