The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-remoteUpgrade container-selinuxUpgrade udicaUpgrade libslirp-develUpgrade criu-develUpgrade critUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade runcUpgrade aardvark-dnsUpgrade python3-criuUpgrade buildah-testsUpgrade containers-commonUpgrade netavarkUpgrade podman-pluginsUpgrade conmonUpgrade toolbox-testsUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade podman-testsUpgrade skopeoUpgrade python3-podmanUpgrade slirp4netnsUpgrade podmanUpgrade criuUpgrade podman-dockerUpgrade crunUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade criu-libsUpgrade buildahUpgrade fuse-overlayfsUpgrade toolbox | Nov 15, 2022 | Mar 18, 2022 |
| Alpine Linux | — | Upgrade git-lfsUpgrade goUpgrade podmanUpgrade coredns | Aug 22, 2024 | Mar 18, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-github-gorilla-mux-develUpgrade golang-github-kr-pty-develUpgrade golang-googlecode-sqlite-develUpgrade golang-srcUpgrade golang-github-gorilla-context-develUpgrade golang-raceUpgrade golang-miscUpgrade golist-debuginfoUpgrade golang-github-syndtr-gocapability-develUpgrade golistUpgrade golangUpgrade runc-debuginfoUpgrade runcUpgrade go-rpm-templatesUpgrade golang-docsUpgrade amazon-ssm-agent-debuginfoUpgrade go-srpm-macrosUpgrade golang-sharedUpgrade golang-binUpgrade go-rpm-macrosUpgrade amazon-ssm-agentUpgrade golang-github-godbus-dbus-develUpgrade go-filesystemUpgrade golang-googlecode-net-develUpgrade golang-tests | Oct 11, 2022 | Mar 18, 2022 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golang | Sep 30, 2022 | Mar 18, 2022 |
| Amazon_linux_2023 | — | Upgrade golist-debuginfoUpgrade golistUpgrade golang-github-cpuguy83-md2manUpgrade amazon-ssm-agent-debuginfoUpgrade golang-raceUpgrade golang-sharedUpgrade amazon-ssm-agentUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-miscUpgrade golang-github-cpuguy83-md2man-debuginfoUpgrade amazon-ssm-agent-debugsourceUpgrade golang-srcUpgrade golangUpgrade golist-debugsourceUpgrade golang-testsUpgrade golang-github-cpuguy83-md2man-develUpgrade golang-docsUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-bin | Feb 17, 2025 | Mar 15, 2022 |
| Centos_linux | — | Upgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade toolbox-testsUpgrade skopeo-debuginfoUpgrade slirp4netnsUpgrade criuUpgrade criu-debuginfoUpgrade runc-debugsourceUpgrade buildahUpgrade toolbox-debugsourceUpgrade criu-debugsourceUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade cockpit-podmanUpgrade podman-remoteUpgrade podmanUpgrade fuse-overlayfs-debugsourceUpgrade conmon-debugsourceUpgrade podman-debuginfoUpgrade python3-podmanUpgrade buildah-debuginfoUpgrade podman-catatonitUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade netavarkUpgrade podman-dockerUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade container-selinuxUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade libslirp-develUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade runcUpgrade toolbox-debuginfoUpgrade crunUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade criu-libsUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-testsUpgrade crun-debuginfoUpgrade conmonUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade critUpgrade udicaUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade podman-debugsource | Nov 9, 2022 | Mar 18, 2022 |
| Debian | — | Upgrade golang-go.crypto | Jul 30, 2024 | Mar 18, 2022 |
| Dell Powerstore Dsa2023129 | — | Upgrade Dell PowerStoreOS to the latest version | Jan 13, 2026 | Apr 4, 2023 |
| Oracle_linux | — | Upgrade criuUpgrade aardvark-dnsUpgrade libslirpUpgrade conmonUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade skopeoUpgrade fuse-overlayfsUpgrade buildah-testsUpgrade podman-catatonitUpgrade cockpit-podmanUpgrade buildahUpgrade podmanUpgrade criu-libsUpgrade python3-podmanUpgrade netavarkUpgrade skopeo-testsUpgrade podman-testsUpgrade crunUpgrade python3-criuUpgrade udicaUpgrade runcUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade slirp4netnsUpgrade container-selinuxUpgrade podman-remoteUpgrade criu-develUpgrade crit | Nov 16, 2022 | Mar 15, 2022 |
| Redhat Openshift | — | Upgrade openshift-clientsUpgrade cri-oUpgrade windows-machine-config-rhel8-operator | Aug 11, 2022 | Mar 15, 2022 |
| Redhat_linux | — | Upgrade conmon-debuginfoUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade runc-debugsourceUpgrade toolbox-debuginfoUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade udicaUpgrade containernetworking-plugins-debuginfoUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade libslirp-debuginfoUpgrade podman-remoteUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python3-criuUpgrade crun-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade podmanUpgrade runcUpgrade aardvark-dnsUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade podman-catatonitUpgrade skopeo-testsUpgrade podman-dockerUpgrade criu-debugsourceUpgrade crunUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade criuUpgrade buildah-testsUpgrade critUpgrade libslirpUpgrade runc-debuginfoUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade podman-pluginsUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade netavarkUpgrade fuse-overlayfsUpgrade skopeo-debuginfoUpgrade podman-testsUpgrade python3-podmanUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade conmon-debugsourceUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade containers-commonUpgrade containernetworking-plugins-debugsourceUpgrade toolboxUpgrade fuse-overlayfs-debuginfoUpgrade podman-gvproxyUpgrade skopeo-debugsourceUpgrade conmon | Nov 9, 2022 | Mar 18, 2022 |
| Rocky_linux | — | Upgrade buildah-testsUpgrade buildah-debuginfoUpgrade buildahUpgrade conmonUpgrade containers-commonUpgrade criu-libsUpgrade skopeo-debugsourceUpgrade runc-debugsourceUpgrade runc-debuginfoUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade conmon-debuginfoUpgrade conmon-debugsourceUpgrade toolboxUpgrade crun-debuginfoUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade aardvark-dnsUpgrade fuse-overlayfs-debuginfoUpgrade netavarkUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade criuUpgrade skopeo-debuginfoUpgrade podman-catatonitUpgrade critUpgrade podman-plugins-debuginfoUpgrade podman-pluginsUpgrade criu-develUpgrade slirp4netnsUpgrade toolbox-testsUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade podman-debugsourceUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podmanUpgrade libslirp-debuginfoUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crunUpgrade buildah-debugsourceUpgrade libslirp-debugsourceUpgrade criu-libs-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade runcUpgrade toolbox-debugsourceUpgrade slirp4netns-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade podman-testsUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfo | Mar 12, 2024 | Mar 18, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Mar 18, 2022 |
| Suse | — | Upgrade docker-kubicUpgrade docker-kubic-kubeadm-criconfigUpgrade containerd-develUpgrade golang-github-prometheus-node_exporterUpgrade dockerUpgrade podman-cni-configUpgrade containerdUpgrade docker-fish-completionUpgrade podmanUpgrade docker-bash-completionUpgrade podman-remoteUpgrade golang-github-prometheus-alertmanagerUpgrade podman-dockerUpgrade docker-kubic-fish-completionUpgrade containerd-ctrUpgrade docker-kubic-zsh-completionUpgrade docker-zsh-completionUpgrade docker-kubic-bash-completion | Oct 26, 2022 | Mar 18, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub