2 matches found
golang.org/x/crypto: empty plaintext packet causes panic
There's an input validation flaw in golang.org/x/crypto's readCipherPacket function. An unauthenticated attacker who sends an empty plaintext packet to a program linked with golang.org/x/crypto/ssh could cause a panic, potentially leading to denial of service...
7.5CVSS6.8AI score0.00989EPSS
SaveExploits0References4
golang.org/x/crypto: empty plaintext packet causes panic
There's an input validation flaw in golang.org/x/crypto's readCipherPacket function. An unauthenticated attacker who sends an empty plaintext packet to a program linked with golang.org/x/crypto/ssh could cause a panic, potentially leading to denial of service...
7.5CVSS6.8AI score0.00989EPSS
SaveExploits0References4
20