GHSA-j5w8-q4qc-rx2x
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | golang.org/x/crypto | < 0.45.0 | 0.45.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
References
External links from the advisory. They lead to third-party sites.