CVE-2026-46597

Опубликовано: 27 мая 2026

Источник: msrc

CVSS3: 7.5

EPSS Низкий

Описание

Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh

EPSS

Процентиль: 38%

0.00473

Низкий

7.5 High

CVSS3

CVE-2026-46597

CVSS3: 7.5

ubuntu

2 месяца назад

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVE-2026-46597

CVSS3: 7.5

redhat

3 месяца назад

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVE-2026-46597

CVSS3: 7.5

nvd

2 месяца назад

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVE-2026-46597

CVSS3: 7.5

debian

2 месяца назад

An incorrectly placed cast from bytes to int allowed for server-side p ...

GHSA-q4h4-gmj2-qvw2

CVSS3: 7.5

github

около 1 месяца назад

golang.org/x/crypto: Invoking byte arithmetic causes underflow and panic

EPSS

Процентиль: 38%

0.00473

Низкий

7.5 High

CVSS3