golang.org/x/crypto vulnerabilities (Go)
32 vulnerabilities.
-
golang.org/x/cryptoGo Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoGo Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoGo Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoGo The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues No score -
golang.org/x/cryptoGo Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent 5.3 Medium -
golang.org/x/cryptoGo Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoGo Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh 10.0 Critical -
golang.org/x/cryptoGo Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts 9.1 Critical -
golang.org/x/cryptoGo Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh 5.3 Medium -
golang.org/x/cryptoGo Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh 9.1 Critical -
golang.org/x/cryptoGo Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent 9.1 Critical -
golang.org/x/cryptoGo Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent 9.1 Critical -
golang.org/x/cryptoGo Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh 9.1 Critical -
golang.org/x/cryptoGo Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh 9.1 Critical -
golang.org/x/cryptoGo Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoGo Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh 6.3 Medium -
golang.org/x/cryptoGo Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 6.5 Medium -
golang.org/x/cryptoGo Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
golang.org/x/cryptoGo Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent 5.3 Medium -
golang.org/x/cryptoGo Potential denial of service in golang.org/x/crypto/ssh/agent 7.5 High -
golang.org/x/cryptoGo Potential denial of service in golang.org/x/crypto 7.5 High -
golang.org/x/cryptoGo Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
golang.org/x/cryptoGo Limited directory traversal vulnerability on Windows in golang.org/x/crypto 7.5 High -
golang.org/x/cryptoGo Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
golang.org/x/cryptoGo golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
golang.org/x/cryptoGo x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
golang.org/x/cryptoGo golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability 7.5 High -
golang.org/x/cryptoGo Helm uses crypto package vulnerable to panic from malformed X.509 certificate 7.5 High -
golang.org/x/cryptoGo Improper Verification of Cryptographic Signature in golang.org/x/crypto 7.5 High -
golang.org/x/cryptoGo Golang/x/crypto message forgery vulnerability 5.9 Medium -
golang.org/x/cryptoGo golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
golang.org/x/cryptoGo golang.org/x/crypto/ssh Man-in-the-Middle attack 8.1 High