golang.org/x/crypto vulnerabilities (Root)
21 vulnerabilities.
-
golang.org/x/cryptoRoot Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoRoot Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoRoot Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoRoot Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent 5.3 Medium -
golang.org/x/cryptoRoot Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoRoot Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh 10.0 Critical -
golang.org/x/cryptoRoot Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts 9.1 Critical -
golang.org/x/cryptoRoot Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh 5.3 Medium -
golang.org/x/cryptoRoot Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh 9.1 Critical -
golang.org/x/cryptoRoot Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent 9.1 Critical -
golang.org/x/cryptoRoot Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent 9.1 Critical -
golang.org/x/cryptoRoot Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh 9.1 Critical -
golang.org/x/cryptoRoot Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh 9.1 Critical -
golang.org/x/cryptoRoot Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh 7.5 High -
golang.org/x/cryptoRoot Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh 6.3 Medium -
golang.org/x/cryptoRoot Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 6.5 Medium -
golang.org/x/cryptoRoot Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
golang.org/x/cryptoRoot Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent 5.3 Medium -
golang.org/x/cryptoRoot Potential denial of service in golang.org/x/crypto/ssh/agent 7.5 High -
golang.org/x/cryptoRoot Potential denial of service in golang.org/x/crypto 7.5 High -
golang.org/x/cryptoRoot Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical