CVE-2020-29652: NULL Pointer Dereference

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers...

PT-2020-6905

Name of the Vulnerable Software and Affected Versions golang.org/x/crypto/ssh versions through v0.0.0-20201203163018-be400aefbc4c Description A nil pointer dereference in the golang.org/x/crypto/ssh component for Go allows remote attackers to cause a denial of service against SSH servers. An...

CVE-2017-3204

The Go SSH library x/crypto/ssh by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism...

CVE-2017-3204: Undefined Security Weakness

The Go SSH library x/crypto/ssh by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism...