The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade amazon-ssm-agent-debuginfoUpgrade amazon-ssm-agent | Sep 8, 2023 | Sep 6, 2022 |
| Amazon_linux | — | Upgrade amazon-ssm-agent | Sep 11, 2023 | Jan 11, 2022 |
| Amazon_linux_2023 | — | Upgrade amazon-ssm-agent-debuginfoUpgrade amazon-ssm-agent-debugsourceUpgrade amazon-ssm-agent | Feb 17, 2025 | Dec 2, 2021 |
| Debian | — | Upgrade golang-go.crypto | Jul 30, 2024 | Sep 6, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade cri-oUpgrade openshift | Aug 30, 2022 | Dec 2, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 6, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Sep 6, 2022 |
| Suse | — | Upgrade docker-kubicUpgrade obs-service-kubevirt_containers_metaUpgrade docker-fish-completionUpgrade docker-kubic-kubeadm-criconfigUpgrade docker-bash-completionUpgrade kubevirt-virt-launcherUpgrade docker-kubic-fish-completionUpgrade kubevirt-manifestsUpgrade containerd-ctrUpgrade kubevirt-virt-handlerUpgrade dockerUpgrade kubevirt-virt-apiUpgrade kubevirt-testsUpgrade kubevirt-virt-controllerUpgrade kubevirt-virt-operatorUpgrade docker-zsh-completionUpgrade kubevirt-virtctlUpgrade containerdUpgrade kubevirt-container-diskUpgrade docker-kubic-zsh-completionUpgrade docker-kubic-bash-completion | Jan 11, 2022 | Jan 10, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub