Skip to main content

Package Ssh

1 CVEs product

Monthly

CVE-2020-9283 Feb 20, 20:15 Go HIGH POC PATCH THREAT This Week

golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Golang Debian Jwt Attack Debian Linux +1
NVD Exploit-DB
CVSS 3.1
7.5
EPSS
21.1%
EPSS 21% CVSS 7.5
HIGH POC PATCH THREAT This Week

golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Golang Debian +3
NVD Exploit-DB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy