CVE-2025-47914

Опубликовано: 19 нояб. 2025

Источник: nvd

CVSS3: 5.3

EPSS Низкий

Описание

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

Ссылки

https://go.dev/cl/721960
Patch
https://go.dev/issue/76364
Issue Tracking
Patch
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
Mailing List
https://pkg.go.dev/vuln/GO-2025-4135
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*

Версия до 0.45.0 (исключая)

EPSS

Процентиль: 6%

0.00021

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVE-2025-47914

CVSS3: 5.3

ubuntu

4 месяца назад

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

CVE-2025-47914

CVSS3: 5.3

redhat

4 месяца назад

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

CVE-2025-47914

CVSS3: 5.3

debian

4 месяца назад

SSH Agent servers do not validate the size of messages when processing ...

SUSE-SU-2026:0067-1

suse-cvrf

3 месяца назад

Security update for podman

GHSA-f6x5-jh6r-wrfv

CVSS3: 5.3

github

4 месяца назад

golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read

EPSS

Процентиль: 6%

0.00021

Низкий

5.3 Medium

CVSS3

Дефекты

CWE-125