Every CVE Search/ Get API key

CVE-2020-29652

golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability

7.5 HighFix available

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

3.18%Up 2.2 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.5

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Record
CVE-2020-29652
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-476
Updated
2026-11-02
CVE List No score

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Record
CVE-2020-29652
Updated
2026-11-02
EUVDEUVD-2022-2245 No score

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Record
EUVD-2022-2245
Updated
2026-11-03
GitHub AdvisoriesGHSA-3vm4-22fp-5rfm 7.5

golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers. An attacker can craft an authentication request message for the gssapi-with-mic method which will cause NewServerConn to panic via a nil pointer dereference if ServerConfig.GSSAPIWithMICConfig is nil.

Record
GHSA-3vm4-22fp-5rfm
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSV 7.5

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Record
CVE-2020-29652
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2020-29652 7.5

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Record
DEBIAN-CVE-2020-29652
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 7 moreShow less
OSVGHSA-3vm4-22fp-5rfm 7.5

golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers. An attacker can craft an authentication request message for the gssapi-with-mic method which will cause NewServerConn to panic via a nil pointer dereference if ServerConfig.GSSAPIWithMICConfig is nil.

Record
GHSA-3vm4-22fp-5rfm
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-476
Updated
2026-11-02
OSVRHSA-2021:1796 7.5

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Record
RHSA-2021:1796
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2021:1796 7.5

Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652)

  • podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.4 Release Notes linked from the References section.

Record
RLSA-2021:1796
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-29652 7.5

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Record
UBUNTU-CVE-2020-29652
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2021:1796 No score

Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • golang: crypto/ssh: crafted authentication request can lead to nil pointer dereference (CVE-2020-29652)

  • podman: Remote traffic to rootless containers is seen as orginating from localhost (CVE-2021-20199)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2021:1796
Updated
2026-11-02
OSVGO-2021-0227 No score

Panic on crafted authentication request message in golang.org/x/crypto/ssh

Clients can cause a panic in SSH servers. An attacker can craft an authentication request message for the “gssapi-with-mic” method which will cause NewServerConn to panic via a nil pointer dereference if ServerConfig.GSSAPIWithMICConfig is nil.

Record
GO-2021-0227
Updated
2026-11-02
OSVopenSUSE-SU-2024:11667-1 No score

velero-1.7.1-1.1 on GA media

These are all security issues fixed in the velero-1.7.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11667-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
golang.org/x/crypto
Go
 before 0.0.0-20201216223049-8b5274cf687f
0.0.0-20201216223049-8b5274cf687f
cockpit-podman
AlmaLinux:8
From an advisory covering 2 CVEs
 before 29-2.module_el8.6.0+2876+9ed4eae2
29-2.module_el8.6.0+2876+9ed4eae2
conmon
AlmaLinux:8
From an advisory covering 2 CVEs
 before 2:2.0.26-1.module_el8.6.0+2876+9ed4eae2
2:2.0.26-1.module_el8.6.0+2876+9ed4eae2
containernetworking-plugins
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.9.1-1.module_el8.6.0+2876+9ed4eae2
0.9.1-1.module_el8.6.0+2876+9ed4eae2
crit
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.15-1.module_el8.6.0+2876+9ed4eae2
3.15-1.module_el8.6.0+2876+9ed4eae2
criu
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.15-1.module_el8.6.0+2876+9ed4eae2
3.15-1.module_el8.6.0+2876+9ed4eae2
fuse-overlayfs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.4.0-2.module_el8.6.0+2876+9ed4eae2
1.4.0-2.module_el8.6.0+2876+9ed4eae2
libslirp
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.1-1.module_el8.6.0+2876+9ed4eae2
4.3.1-1.module_el8.6.0+2876+9ed4eae2
libslirp-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.3.1-1.module_el8.6.0+2876+9ed4eae2
4.3.1-1.module_el8.6.0+2876+9ed4eae2
python3-criu
AlmaLinux:8
From an advisory covering 2 CVEs
 before 3.15-1.module_el8.6.0+2876+9ed4eae2
3.15-1.module_el8.6.0+2876+9ed4eae2
Show 101 moreShow less
Affected packages
PackageAffectedFixed
slirp4netns
AlmaLinux:8
From an advisory covering 2 CVEs
 before 1.1.8-1.module_el8.6.0+2876+9ed4eae2
1.1.8-1.module_el8.6.0+2876+9ed4eae2
udica
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.2.4-1.module_el8.6.0+2876+9ed4eae2
0.2.4-1.module_el8.6.0+2876+9ed4eae2
golang-go.crypto
Debian:12
 before 1:0.0~git20201221.eec23a3-1
1:0.0~git20201221.eec23a3-1
golang-go.crypto
Debian:13
 before 1:0.0~git20201221.eec23a3-1
1:0.0~git20201221.eec23a3-1
golang-go.crypto
Debian:14
 before 1:0.0~git20201221.eec23a3-1
1:0.0~git20201221.eec23a3-1
buildah
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.19.7-1.module+el8.4.0+10607+f4da7515
0:1.19.7-1.module+el8.4.0+10607+f4da7515
buildah-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.19.7-1.module+el8.4.0+10607+f4da7515
0:1.19.7-1.module+el8.4.0+10607+f4da7515
buildah-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.19.7-1.module+el8.4.0+10607+f4da7515
0:1.19.7-1.module+el8.4.0+10607+f4da7515
buildah-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.19.7-1.module+el8.4.0+10607+f4da7515
0:1.19.7-1.module+el8.4.0+10607+f4da7515
buildah-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.19.7-1.module+el8.4.0+10607+f4da7515
0:1.19.7-1.module+el8.4.0+10607+f4da7515
cockpit-podman
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:29-2.module+el8.4.0+10607+f4da7515
0:29-2.module+el8.4.0+10607+f4da7515
conmon
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 2:2.0.26-1.module+el8.4.0+10607+f4da7515
2:2.0.26-1.module+el8.4.0+10607+f4da7515
conmon-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 2:2.0.26-1.module+el8.4.0+10607+f4da7515
2:2.0.26-1.module+el8.4.0+10607+f4da7515
conmon-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 2:2.0.26-1.module+el8.4.0+10607+f4da7515
2:2.0.26-1.module+el8.4.0+10607+f4da7515
container-selinux
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 2:2.158.0-1.module+el8.4.0+10607+f4da7515
2:2.158.0-1.module+el8.4.0+10607+f4da7515
containernetworking-plugins
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.9.1-1.module+el8.4.0+10607+f4da7515
0:0.9.1-1.module+el8.4.0+10607+f4da7515
containernetworking-plugins-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.9.1-1.module+el8.4.0+10607+f4da7515
0:0.9.1-1.module+el8.4.0+10607+f4da7515
containernetworking-plugins-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.9.1-1.module+el8.4.0+10607+f4da7515
0:0.9.1-1.module+el8.4.0+10607+f4da7515
containers-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:1.2.2-8.module+el8.4.0+10607+f4da7515
1:1.2.2-8.module+el8.4.0+10607+f4da7515
crit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.4.0+10607+f4da7515
0:3.15-1.module+el8.4.0+10607+f4da7515
criu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.4.0+10607+f4da7515
0:3.15-1.module+el8.4.0+10607+f4da7515
criu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.4.0+10607+f4da7515
0:3.15-1.module+el8.4.0+10607+f4da7515
criu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.4.0+10607+f4da7515
0:3.15-1.module+el8.4.0+10607+f4da7515
crun
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.18-1.module+el8.4.0+10607+f4da7515
0:0.18-1.module+el8.4.0+10607+f4da7515
crun-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.18-1.module+el8.4.0+10607+f4da7515
0:0.18-1.module+el8.4.0+10607+f4da7515
crun-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.18-1.module+el8.4.0+10607+f4da7515
0:0.18-1.module+el8.4.0+10607+f4da7515
fuse-overlayfs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.0-2.module+el8.4.0+10607+f4da7515
0:1.4.0-2.module+el8.4.0+10607+f4da7515
fuse-overlayfs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.0-2.module+el8.4.0+10607+f4da7515
0:1.4.0-2.module+el8.4.0+10607+f4da7515
fuse-overlayfs-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.4.0-2.module+el8.4.0+10607+f4da7515
0:1.4.0-2.module+el8.4.0+10607+f4da7515
libslirp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.1-1.module+el8.4.0+10607+f4da7515
0:4.3.1-1.module+el8.4.0+10607+f4da7515
libslirp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.1-1.module+el8.4.0+10607+f4da7515
0:4.3.1-1.module+el8.4.0+10607+f4da7515
libslirp-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.1-1.module+el8.4.0+10607+f4da7515
0:4.3.1-1.module+el8.4.0+10607+f4da7515
libslirp-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:4.3.1-1.module+el8.4.0+10607+f4da7515
0:4.3.1-1.module+el8.4.0+10607+f4da7515
oci-seccomp-bpf-hook
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.2.0-2.module+el8.4.0+10607+f4da7515
0:1.2.0-2.module+el8.4.0+10607+f4da7515
oci-seccomp-bpf-hook-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.2.0-2.module+el8.4.0+10607+f4da7515
0:1.2.0-2.module+el8.4.0+10607+f4da7515
oci-seccomp-bpf-hook-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.2.0-2.module+el8.4.0+10607+f4da7515
0:1.2.0-2.module+el8.4.0+10607+f4da7515
podman
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-catatonit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-catatonit-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-docker
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-plugins
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-plugins-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-remote
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-remote-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
podman-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+10607+f4da7515
0:3.0.1-6.module+el8.4.0+10607+f4da7515
python3-criu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.4.0+10607+f4da7515
0:3.15-1.module+el8.4.0+10607+f4da7515
runc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515
0:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515
runc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515
0:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515
runc-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515
0:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515
skopeo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:1.2.2-8.module+el8.4.0+10607+f4da7515
1:1.2.2-8.module+el8.4.0+10607+f4da7515
skopeo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:1.2.2-8.module+el8.4.0+10607+f4da7515
1:1.2.2-8.module+el8.4.0+10607+f4da7515
skopeo-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:1.2.2-8.module+el8.4.0+10607+f4da7515
1:1.2.2-8.module+el8.4.0+10607+f4da7515
skopeo-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 1:1.2.2-8.module+el8.4.0+10607+f4da7515
1:1.2.2-8.module+el8.4.0+10607+f4da7515
slirp4netns
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.8-1.module+el8.4.0+10607+f4da7515
0:1.1.8-1.module+el8.4.0+10607+f4da7515
slirp4netns-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.8-1.module+el8.4.0+10607+f4da7515
0:1.1.8-1.module+el8.4.0+10607+f4da7515
slirp4netns-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:1.1.8-1.module+el8.4.0+10607+f4da7515
0:1.1.8-1.module+el8.4.0+10607+f4da7515
toolbox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.0.8-1.module+el8.4.0+10607+f4da7515
0:0.0.8-1.module+el8.4.0+10607+f4da7515
udica
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.2.4-1.module+el8.4.0+10607+f4da7515
0:0.2.4-1.module+el8.4.0+10607+f4da7515
buildah
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.19.7-1.module+el8.4.0+558+7340b765
0:1.19.7-1.module+el8.4.0+558+7340b765
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:29-2.module+el8.7.0+1076+9b1c11c1
0:29-2.module+el8.7.0+1076+9b1c11c1
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:29-2.module+el8.4.0+556+40122d08
0:29-2.module+el8.4.0+556+40122d08
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:29-2.module+el8.5.0+709+440d5e7e
0:29-2.module+el8.5.0+709+440d5e7e
cockpit-podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:29-2.module+el8.6.0+783+10209741
0:29-2.module+el8.6.0+783+10209741
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.0.26-1.module+el8.4.0+558+7340b765
2:2.0.26-1.module+el8.4.0+558+7340b765
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.0.26-1.module+el8.5.0+709+440d5e7e
2:2.0.26-1.module+el8.5.0+709+440d5e7e
conmon
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.0.26-1.module+el8.6.0+783+10209741
2:2.0.26-1.module+el8.6.0+783+10209741
containernetworking-plugins
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.9.1-1.module+el8.7.0+1076+9b1c11c1
0:0.9.1-1.module+el8.7.0+1076+9b1c11c1
containernetworking-plugins
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.9.1-1.module+el8.4.0+556+40122d08
0:0.9.1-1.module+el8.4.0+556+40122d08
containernetworking-plugins
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.9.1-1.module+el8.5.0+709+440d5e7e
0:0.9.1-1.module+el8.5.0+709+440d5e7e
containernetworking-plugins
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.9.1-1.module+el8.6.0+783+10209741
0:0.9.1-1.module+el8.6.0+783+10209741
container-selinux
Rocky Linux:8
From an advisory covering 2 CVEs
 before 2:2.158.0-1.module+el8.4.0+558+7340b765
2:2.158.0-1.module+el8.4.0+558+7340b765
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.7.0+1076+9b1c11c1
0:3.15-1.module+el8.7.0+1076+9b1c11c1
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.4.0+556+40122d08
0:3.15-1.module+el8.4.0+556+40122d08
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.5.0+709+440d5e7e
0:3.15-1.module+el8.5.0+709+440d5e7e
criu
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.15-1.module+el8.6.0+783+10209741
0:3.15-1.module+el8.6.0+783+10209741
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.0-2.module+el8.7.0+1076+9b1c11c1
0:1.4.0-2.module+el8.7.0+1076+9b1c11c1
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.0-2.module+el8.4.0+558+7340b765
0:1.4.0-2.module+el8.4.0+558+7340b765
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.0-2.module+el8.5.0+709+440d5e7e
0:1.4.0-2.module+el8.5.0+709+440d5e7e
fuse-overlayfs
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.4.0-2.module+el8.6.0+783+10209741
0:1.4.0-2.module+el8.6.0+783+10209741
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.3.1-1.module+el8.7.0+1076+9b1c11c1
0:4.3.1-1.module+el8.7.0+1076+9b1c11c1
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.3.1-1.module+el8.4.0+556+40122d08
0:4.3.1-1.module+el8.4.0+556+40122d08
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.3.1-1.module+el8.5.0+709+440d5e7e
0:4.3.1-1.module+el8.5.0+709+440d5e7e
libslirp
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.3.1-1.module+el8.6.0+783+10209741
0:4.3.1-1.module+el8.6.0+783+10209741
oci-seccomp-bpf-hook
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.2.0-2.module+el8.4.0+556+40122d08
0:1.2.0-2.module+el8.4.0+556+40122d08
podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.4.0+558+7340b765
0:3.0.1-6.module+el8.4.0+558+7340b765
podman
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:3.0.1-6.module+el8.5.0+709+440d5e7e
0:3.0.1-6.module+el8.5.0+709+440d5e7e
skopeo
Rocky Linux:8
From an advisory covering 2 CVEs
 before 1:1.2.2-8.module+el8.5.0+661+c0df01f6
1:1.2.2-8.module+el8.5.0+661+c0df01f6
slirp4netns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1.8-1.module+el8.7.0+1076+9b1c11c1
0:1.1.8-1.module+el8.7.0+1076+9b1c11c1
slirp4netns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1.8-1.module+el8.4.0+537+38cf4e42
0:1.1.8-1.module+el8.4.0+537+38cf4e42
slirp4netns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1.8-1.module+el8.5.0+709+440d5e7e
0:1.1.8-1.module+el8.5.0+709+440d5e7e
slirp4netns
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:1.1.8-1.module+el8.6.0+783+10209741
0:1.1.8-1.module+el8.6.0+783+10209741
toolbox
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.0.8-1.module+el8.4.0+556+40122d08
0:0.0.8-1.module+el8.4.0+556+40122d08
udica
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.2.4-1.module+el8.7.0+1076+9b1c11c1
0:0.2.4-1.module+el8.7.0+1076+9b1c11c1
udica
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.2.4-1.module+el8.4.0+556+40122d08
0:0.2.4-1.module+el8.4.0+556+40122d08
udica
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.2.4-1.module+el8.5.0+709+440d5e7e
0:0.2.4-1.module+el8.5.0+709+440d5e7e
udica
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:0.2.4-1.module+el8.6.0+783+10209741
0:0.2.4-1.module+el8.6.0+783+10209741
golang-go.crypto
Ubuntu:Pro:20.04:LTS
 All versions, plus listed versions
1:0.0~git20190701.4def268-21:0.0~git20200221.2aa609c-11:0.0~git20200221.2aa609c-1ubuntu0.1~esm11:0.0~git20200221.2aa609c-1ubuntu0.1~esm21:0.0~git20200221.2aa609c-1ubuntu0.1~esm3
 None known
golang-go.crypto
Ubuntu:22.04:LTS
 before 1:0.0~git20201221.eec23a3-1
1:0.0~git20201221.eec23a3-1
velero
openSUSE:Tumbleweed
 before 1.7.1-1.1
1.7.1-1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-29652 is a high vulnerability (CVSS 7.5) in Golang Ssh, published December 17, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.18%, the 88th percentile. Fixed in golang.org/x/crypto 0.0.0-20201216223049-8b5274cf687f.

References

Show 53 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open