~ / search / GHSA-8c26-wmh5-6g9v

GHSA-8c26-wmh5-6g9v

golang.org/x/crypto/ssh Denial of service via crafted Signer

Source: GitHub Advisory Database (reviewed) High CVE-2022-27191

Packages

EcosystemPackageAffectedFixed in
Go golang.org/x/crypto < 0.0.0-20220314234659-1baeb1ce4c0b 0.0.0-20220314234659-1baeb1ce4c0b

Details

As written in the advisory (Markdown source, shown as plain text).

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

References

External links from the advisory. They lead to third-party sites.