The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
| Vendor | Product | Versions | Fixed In |
|---|---|---|---|
| golang | ssh | 0.0.0-20220314234659-1baeb1ce4c0b | - |
| fedoraproject | extra_packages_for_enterprise_linux | - | - |
| fedoraproject | fedora |
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6
Affected Products
28
References
golang / ssh
| - |
| - |
| fedoraproject | fedora | - | - |
| fedoraproject | fedora | - | - |
| redhat | advanced_cluster_management_for_kubernetes | - | - |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability
Impact