Fluid Attacks Database

Description

golang.org/x/crypto/ssh: Invoking client can cause server deadlock on unexpected responses

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	golang-go.crypto	=1:0.10.0-1 \|\| =1:0.12.0-1 \|\| =1:0.13.0-1 \|\| =1:0.14.0-1 \|\| =1:0.16.0-1 \|\| =1:0.17.0-1 \|\| =1:0.18.0-1 \|\| =1:0.19.0-1 \|\| =1:0.21.0-1 \|\| =1:0.22.0-1 \|\| =1:0.23.0-1 \|\| =1:0.24.0-1 \|\| =1:0.24.0-2 \|\| =1:0.25.0-1 \|\| =1:0.25.0-1~bpo12+1 \|\| =1:0.33.0-1~exp1 \|\| =1:0.36.0-1~exp1 \|\| =1:0.4.0-1 \|\| =1:0.41.0-1~exp1 \|\| =1:0.42.0-1 \|\| =1:0.42.0-1~exp1 \|\| =1:0.42.0-2 \|\| =1:0.42.0-3 \|\| =1:0.42.0-4 \|\| =1:0.43.0-1 \|\| =1:0.43.0-2 \|\| =1:0.45.0-1 \|\| =1:0.46.0-1 \|\| =1:0.47.0-1 \|\| =1:0.50.0-1 \|\| =1:0.52.0-1 \|\| =1:0.52.0-1~bpo13+1 \|\| =1:0.53.0-1 \|\| =1:0.54.0-1 \|\| =1:0.55.0-1 \|\| =1:0.56.0-1	-
rpm rhel10	podman	<7:5.8.2-4.el10_2	7:5.8.2-4.el10_2
rpm rhel10	buildah	<2:1.43.1-3.el10_2	2:1.43.1-3.el10_2
rpm rhel9	buildah	<2:1.43.1-2.el9_8	2:1.43.1-2.el9_8
rpm rhel10	gvisor-tap-vsock	-	-
rpm rhel9	gvisor-tap-vsock	-	-
rpm rhel9	podman	<6:5.8.2-7.el9_8	6:5.8.2-7.el9_8
rpm rhel9.6	podman	<5:5.4.0-22.el9_6.5	5:5.4.0-22.el9_6.5
debian 13	golang-go.crypto	=1:0.25.0-1 \|\| =1:0.33.0-1~exp1 \|\| =1:0.36.0-1~exp1 \|\| =1:0.41.0-1~exp1 \|\| =1:0.42.0-1 \|\| =1:0.42.0-1~exp1 \|\| =1:0.42.0-2 \|\| =1:0.42.0-3 \|\| =1:0.42.0-4 \|\| =1:0.43.0-1 \|\| =1:0.43.0-2 \|\| =1:0.45.0-1 \|\| =1:0.46.0-1 \|\| =1:0.47.0-1 \|\| =1:0.50.0-1 \|\| =1:0.52.0-1 \|\| =1:0.52.0-1~bpo13+1 \|\| =1:0.53.0-1 \|\| =1:0.54.0-1 \|\| =1:0.55.0-1 \|\| =1:0.56.0-1	-
go	golang.org/x/crypto	>=0 <0.52.0	0.52.0

1-10 of 12

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.