GHSA-f6x5-jh6r-wrfv
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | golang.org/x/crypto | < 0.45.0 | 0.45.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
References
External links from the advisory. They lead to third-party sites.