CVE-2020-9283
20.02.2020, 20:15
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| golang | package_ssh | 0.0.0-20200220183623-bac4c82f6975 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-go.crypto |
| ||||||||||||||||||||||||||||||||||
| lxd |
| ||||||||||||||||||||||||||||||||||
| mongo-tools |
| ||||||||||||||||||||||||||||||||||
| snapd |
|
Common Weakness Enumeration
References