468 matches found
Potential denial of service in golang.org/x/crypto/ssh/agent
...
SUSE CVE-2025-47913
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
golang.org/x/crypto/ssh/agent has a potential denial of service
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
AZL-70313 CVE-2025-47913 affecting package buildah 1.41.4-6
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
AZL-70331 CVE-2025-47913 affecting package docker-compose for versions less than 2.27.0-6
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
AZL-70328 CVE-2025-47913 affecting package docker-buildx for versions less than 0.14.0-8
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
DEBIAN-CVE-2025-47913
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
CVE-2025-47913 Potential denial of service in golang.org/x/crypto/ssh/agent
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
CVE-2025-47913
CVE-2025-47913: SSH clients panic when receiving SSH_AGENT_SUCCESS, causing early client termination. CVSS v3.1 base 7.5 (HIGH). Connected IBM advisories confirm the issue affects IBM Storage Scale (5.2.3.0–5.2.3.5, fixed in 5.2.3.6) and IBM Storage Scale 6.0.0.0 (fixed in 6.0.0.1), with remediat...
CVE-2025-47913 Potential denial of service in golang.org/x/crypto/ssh/agent
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
EUVD-1999-0013
Malware in sbrugna...
EUVD-2016-1206
Malware in sbrugna...
EUVD-2021-14748
Malware in sbrugna...
EUVD-2022-0550
Malicious code in bioql PyPI...
EUVD-2022-5656
Malicious code in bioql PyPI...
Improper Handling of Unexpected Data Type
Overview Affected versions of this package are vulnerable to Improper Handling of Unexpected Data Type when functions including List and SignWithFlags process successAgentMsg. This can be triggered by a malicious agent sending a single 0x06 byte SSHAGENTSUCCESS, which is unmarshalled into a...
MCP SSH Agent 安全漏洞
MCP SSH Agent is an open source Model Context Protocol server for managing and controlling SSH connections from Aionda GmbH. A security vulnerability exists in MCP SSH Agent version 1.0.3 and earlier, which stems from a command injection in the file server-simple.mjs...
[SECURITY] Fedora 42 Update: toolbox-0.2-1.fc42
Toolbx is a tool for Linux, which allows the use of interactive command line environments for software development and troubleshooting the host operating system, without having to install software on the host. It is built on top of Podman and other standard container technologies from OCI. Toolbx...
ABB M2M Gateway Arbitrary Code Execution in embedded OpenSSH (CVE-2023-38408)
The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists because o...
