CVE-2020-9283
20.02.2020, 20:15
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.Enginsight
| Vendor | Product | Version |
|---|---|---|
| golang | package_ssh | 0.0.0-20200220183623-bac4c82f6975 |
| debian | debian_linux | 9.0 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| golang-go.crypto |
| ||||||||||||||||||||||||||
| lxd |
| ||||||||||||||||||||||||||
| mongo-tools |
| ||||||||||||||||||||||||||
| snapd |
|
Common Weakness Enumeration
References