CVE-2020-9283
Improper Verification of Cryptographic Signature in golang.org/x/crypto
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
- Record
CVE-2020-9283- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-347
- Updated
- 2026-11-02
CVE List No score
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
- Record
CVE-2020-9283- Updated
- 2026-11-02
EUVDEUVD-2021-1059 No score
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
- Record
EUVD-2021-1059- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-ffhg-7mh4-33c4
Improper Verification of Cryptographic Signature in golang.org/x/crypto
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
- Record
GHSA-ffhg-7mh4-33c4- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-347
- Updated
- 2026-11-02
OSV
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
- Record
CVE-2020-9283- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-9283
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
- Record
DEBIAN-CVE-2020-9283- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 6 moreShow less
OSVGHSA-ffhg-7mh4-33c4
Improper Verification of Cryptographic Signature in golang.org/x/crypto
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
- Record
GHSA-ffhg-7mh4-33c4- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-347
- Updated
- 2026-11-02
OSVRHBA-2020:3179
Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.31 packages update
- Record
RHBA-2020:3179- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2020:2413
Red Hat Security Advisory: OpenShift Container Platform 4.5 package security update
- Record
RHSA-2020:2413- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3369
Red Hat Security Advisory: Red Hat OpenShift Service Mesh security update
- Record
RHSA-2020:3369- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-9283
golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.
- Record
UBUNTU-CVE-2020-9283- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVGO-2020-0012 No score
Panic due to improper verification of cryptographic signatures in golang.org/x/crypto/ssh
An attacker can craft an ssh-ed25519 or [email protected] public key, such that the library will panic when trying to verify a signature with it. If verifying signatures using user supplied public keys, this may be used as a denial of service vector.
- Record
GO-2020-0012- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
golang.org/x/cryptoGo |
before 0.0.0-20200220183623-bac4c82f6975 | 0.0.0-20200220183623-bac4c82f6975 |
golang-go.cryptoDebian:12 |
before 1:0.0~git20200221.2aa609c-1 | 1:0.0~git20200221.2aa609c-1 |
golang-go.cryptoDebian:13 |
before 1:0.0~git20200221.2aa609c-1 | 1:0.0~git20200221.2aa609c-1 |
golang-go.cryptoDebian:14 |
before 1:0.0~git20200221.2aa609c-1 | 1:0.0~git20200221.2aa609c-1 |
golang-go.cryptoDebian:9 From an advisory covering 3 CVEs |
before 1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1+deb8u1, plus listed versions 1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1 |
1:0.0~git20170407.0.55a552f+REALLY.0.0~git20161012.0.5f31782-1+deb8u1 |
resticDebian:9 |
before 0.3.3-1+deb9u1, plus listed versions 0.3.3-1 |
0.3.3-1+deb9u1 |
packerDebian:9 |
before 0.10.2+dfsg-6+deb9u1, plus listed versions 0.10.2+dfsg-6 |
0.10.2+dfsg-6+deb9u1 |
golang-go.cryptoDebian:10 From an advisory covering 3 CVEs |
before 1:0.0~git20181203.505ab14-1+deb10u1, plus listed versions 1:0.0~git20181203.505ab14-1 |
1:0.0~git20181203.505ab14-1+deb10u1 |
openshift-clientsRed Hat:openshift:4.3::el7 |
before 0:4.3.31-202007250052.p0.git.3329.59998b9.el7 | 0:4.3.31-202007250052.p0.git.3329.59998b9.el7 |
openshift-clients-redistributableRed Hat:openshift:4.3::el7 |
before 0:4.3.31-202007250052.p0.git.3329.59998b9.el7 | 0:4.3.31-202007250052.p0.git.3329.59998b9.el7 |
Show 27 moreShow less
| Package | Affected | Fixed |
|---|---|---|
openshift-clientsRed Hat:openshift:4.3::el8 |
before 0:4.3.31-202007250052.p0.git.3329.59998b9.el8 | 0:4.3.31-202007250052.p0.git.3329.59998b9.el8 |
openshift-clients-redistributableRed Hat:openshift:4.3::el8 |
before 0:4.3.31-202007250052.p0.git.3329.59998b9.el8 | 0:4.3.31-202007250052.p0.git.3329.59998b9.el8 |
openshiftRed Hat:openshift:4.5::el7 From an advisory covering 5 CVEs |
before 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 | 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 |
openshift-hyperkubeRed Hat:openshift:4.5::el7 From an advisory covering 5 CVEs |
before 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 | 0:4.5.0-202007012112.p0.git.0.582d7fc.el7 |
openshiftRed Hat:openshift:4.5::el8 From an advisory covering 5 CVEs |
before 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 | 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 |
openshift-hyperkubeRed Hat:openshift:4.5::el8 From an advisory covering 5 CVEs |
before 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 | 0:4.5.0-202007012112.p0.git.0.582d7fc.el8 |
machine-config-daemonRed Hat:openshift:4.5::el8 From an advisory covering 5 CVEs |
before 0:4.5.0-202007012112.p0.git.2527.d12c3da.el8 | 0:4.5.0-202007012112.p0.git.2527.d12c3da.el8 |
kialiRed Hat:service_mesh:1.1::el7 From an advisory covering 5 CVEs |
before 0:v1.12.10.redhat2-1.el7 | 0:v1.12.10.redhat2-1.el7 |
iorRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemeshRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-citadelRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-cniRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-galleyRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-grafanaRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:6.4.3-13.el8 | 0:6.4.3-13.el8 |
servicemesh-grafana-prometheusRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:6.4.3-13.el8 | 0:6.4.3-13.el8 |
servicemesh-istioctlRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-mixcRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-mixsRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-operatorRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-2.el8 | 0:1.1.6-2.el8 |
servicemesh-pilot-agentRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-pilot-discoveryRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
servicemesh-prometheusRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:2.14.0-14.el8 | 0:2.14.0-14.el8 |
servicemesh-sidecar-injectorRed Hat:service_mesh:1.1::el8 From an advisory covering 5 CVEs |
before 0:1.1.6-1.el8 | 0:1.1.6-1.el8 |
golang-go.cryptoUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1:0.0~git20150608-11:0.0~git20151201.0.7b85b09-21:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm11:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm21:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3 |
None known |
golang-go.cryptoUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1:0.0~git20170629.0.5ef0053-1ubuntu11:0.0~git20170629.0.5ef0053-1ubuntu21:0.0~git20170629.0.5ef0053-21:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm11:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm21:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3 |
None known |
mongo-toolsUbuntu:18.04:LTS |
All versions, plus listed versions 3.2.11-13.2.11-1ubuntu13.4.14-13.4.14-23.6.3-0ubuntu1 |
None known |
mongo-toolsUbuntu:20.04:LTS |
All versions, plus listed versions 3.6.3-0ubuntu1 |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Go SSH servers 0.0.2 - Denial of Service (PoC) | 2020-02-24 |
| PoC in GitHub | brompwnie/CVE-2020-9283 | 2020-06-02 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-9283 is a high vulnerability (CVSS 7.5) in Debian Linux, published February 20, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 21.1%, the 97th percentile. Fixed in golang.org/x/crypto 0.0.0-20200220183623-bac4c82f6975.
References
groups.google.com/forum
packetstormsecurity.com/files/156480/Go-SSH-0.0.2-Denial-Of-Service.html
lists.debian.org/debian-lts-announce/2020/10/msg00014.html
Show 60 moreShow less
nvd.nist.gov/vuln/detail/CVE-2020-9283
github.com/golang/crypto/commit/bac4c82f69751a6dd76e702d54b3ceb88adab236
exploit-db.com/exploits/48121
go.dev/cl/220357
go.googlesource.com/crypto/+/bac4c82f69751a6dd76e702d54b3ceb88adab236
pkg.go.dev/vuln/GO-2020-0012
security-tracker.debian.org/tracker/CVE-2020-9283
access.redhat.com/errata/RHBA-2020:3179
bugzilla.redhat.com/show_bug.cgi?id=1854927
security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_3179.json
cve.org/CVERecord?id=CVE-2020-9283
hackerone.com/reports/712065
npmjs.com/advisories/1523
blog.jquery.com/2020/04/10/jquery-3-5-0-released
cisa.gov/known-exploited-vulnerabilities-catalog
ubuntu.com/security/CVE-2020-9283