golang-go.crypto vulnerabilities (Ubuntu)
29 vulnerabilities.
-
golang-go.cryptoUbuntu Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh 7.5 High -
golang-go.cryptoUbuntu Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent 5.3 Medium -
golang-go.cryptoUbuntu Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh 7.5 High -
golang-go.cryptoUbuntu Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh 10.0 Critical -
golang-go.cryptoUbuntu Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts 9.1 Critical -
golang-go.cryptoUbuntu Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh 5.3 Medium -
golang-go.cryptoUbuntu Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh 9.1 Critical -
golang-go.cryptoUbuntu Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent 9.1 Critical -
golang-go.cryptoUbuntu Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent 9.1 Critical -
golang-go.cryptoUbuntu Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh 9.1 Critical -
golang-go.cryptoUbuntu Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh 9.1 Critical -
golang-go.cryptoUbuntu Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh 7.5 High -
golang-go.cryptoUbuntu Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh 6.3 Medium -
golang-go.cryptoUbuntu Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh 6.5 Medium -
golang-go.cryptoUbuntu Unbounded memory consumption in golang.org/x/crypto/ssh 5.3 Medium -
golang-go.cryptoUbuntu Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent 5.3 Medium -
golang-go.cryptoUbuntu Potential denial of service in golang.org/x/crypto/ssh/agent 7.5 High -
golang-go.cryptoUbuntu Potential denial of service in golang.org/x/crypto 7.5 High -
golang-go.cryptoUbuntu Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 6.1 Medium -
golang-go.cryptoUbuntu Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto 9.1 Critical -
golang-go.cryptoUbuntu Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
golang-go.cryptoUbuntu golang.org/x/crypto/ssh Denial of service via crafted Signer 7.5 High -
golang-go.cryptoUbuntu Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... 9.1 Critical -
golang-go.cryptoUbuntu x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
golang-go.cryptoUbuntu golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability 7.5 High -
golang-go.cryptoUbuntu Improper Verification of Cryptographic Signature in golang.org/x/crypto 7.5 High -
golang-go.cryptoUbuntu Golang/x/crypto message forgery vulnerability 5.9 Medium -
golang-go.cryptoUbuntu golang.org/x/crypto/salsa20/salsa uses insufficiently random values 5.9 Medium -
golang-go.cryptoUbuntu golang.org/x/crypto/ssh Man-in-the-Middle attack 8.1 High