Описание
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
Ссылки
- Issue Tracking
- Issue Tracking
- Mailing List
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.52.0 (исключая)
cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*
EPSS
Процентиль: 36%
0.00412
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-129
Связанные уязвимости
CVSS3: 5.3
ubuntu
6 месяцев назад
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
CVSS3: 5.3
redhat
6 месяцев назад
For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used.
CVSS3: 5.3
msrc
6 месяцев назад
Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent
CVSS3: 5.3
debian
6 месяцев назад
For certain crafted inputs, a 'ed25519.PrivateKey' was created by cast ...
EPSS
Процентиль: 36%
0.00412
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-129