CVE-2023-48795

The SSH transport protocol, including OpenSSH (before 9.6), is vulnerable to the Terrapin attack (CVE-2023-48795). This vulnerability allows remote attackers to bypass integrity checks during the handshake phase by exploiting how the SSH Binary Packet Protocol (BPP) handles sequence numbers. The ...

CVE-2026-46595

The golang.org/x/crypto/ssh library is affected by an authorization bypass vulnerability. If an SSH server configuration uses a callback other than a public key , the system fails to perform source-address validation . This issue was previously addressed in CVE-2024-45337 but persists in specific...

CVE-2019-11840

CVE-2019-11840 affects golang.org/x/crypto (amd64 salsa20 and salsa20/salsa). If keystream surpasses 256 GiB or the counter grows beyond 32 bits, output becomes incorrect and then repeats earlier keystream, causing potential confidentiality loss in encryption/CSPRNG. The connected Debian advisory...

CVE-2019-11841

CVE-2019-11841 concerns a Cleartext Signed Message Spoofing issue in the Clearsign component of supplementary Go cryptography libraries. The OpenPGP clearsign implementation ignores the Hash Armor Header, enabling spoofing of the digest algorithm and, because Armor Header parsing is skipped, allo...

CVE-2026-42508

The golang.org/x/crypto/ssh/knownhosts component is vulnerable to an auth bypass because a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. The fix ensures that both the 'key' and 'key.SignatureKey' are checked for the @revoked status. This vulnerability affects ...

CVE-2026-39831

The Verify() method in the Go programming language (specifically within golang.org/x/crypto/ssh) fails to check the User Presence flag for FIDO/U2F security key types ([email protected] and [email protected] ). This flaw allows signatures generated without physical touch...

CVE-2026-39830

A malicious SSH peer can send unsolicited global request responses to fill an internal buffer, which blocks the connection's read loop. This prevents the blocked goroutine from being released via Close() , leading to a resource leak per connection. The vulnerability affects components using the g...

CVE-2026-39834

An integer overflow in the internal payload size calculation of the Go programming language (specifically golang.org/x/crypto/ssh) allows a remote attacker to cause a denial of service . When writing data larger than 4GB in a single Write call on an SSH channel, the write loop spins indefinitely,...

CVE-2026-39829

The RSA and DSA public key parsers in the golang.org/x/crypto/ssh library failed to enforce size limits on key parameters. An unauthenticated client could trigger a Denial of Service (DoS) by providing a crafted public key with an excessively large modulus or DSA parameter, causing several minute...

CVE-2026-39835

The golang.org/x/crypto/ssh package is vulnerable to a Denial of Service (DoS) attack via a server panic. If an SSH server uses CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority , a client presenting a certificate can trigger a panic because the callbacks are...

CVE-2026-56855

The golang.org/x/crypto/ssh package is vulnerable to a Denial of Service (DoS) condition where a malicious peer can send crafted messages after a channel is established to deadlock the entire connection . The root cause is the improper handling of channel messages, where certain messages would be...

CVE-2026-39827

A memory leak in golang.org/x/crypto/ssh allows an authenticated SSH client to cause unbounded memory growth by repeatedly opening channels that the server rejects. This vulnerability can eventually crash the server process, affecting all connected users. Affected products include amazon-cloudwat...

CVE-2026-39833

The golang.org/x/crypto/ssh/agent component (used in the Go programming language) contains a vulnerability in the NewKeyring() function. The in-memory keyring silently accepted keys with the ConfirmBeforeUse constraint but failed to enforce it, allowing keys to sign without a confirmation prompt ...

CVE-2026-46597

A vulnerability in the AES-GCM packet decoder is caused by an incorrectly placed cast from bytes to int , which can trigger a server-side panic when processing well-crafted inputs. This issue affects the amazon-cloudwatch-agent on Amazon Linux 2023 and Amazon Linux 2, as well as the amazon-ssm-ag...

CVE-2026-39832

A security bypass exists in the golang.org/x/crypto/ssh/agent component due to improper handling of key restrictions. When adding a key to a remote agent, constraint extensions like [email protected] were not serialized in the request, causing destination restrictions to be sil...

CVE-2026-39828

The amazon-cloudwatch-agent software is affected by CVE-2026-39828 , a vulnerability where an SSH server authentication callback returning PartialSuccessError with non-nil Permissions would silently discard those permissions. This flaw could potentially drop certificate restrictions, such as forc...

CVE-2025-47914

SSH Agent servers fail to validate message sizes when processing new identity requests, which can lead to an out-of-bounds read and cause the program to panic if it receives a malformed message. This vulnerability affects the golang.org/x/crypto package and the consul package. Impacted products i...

CVE-2026-46598

The golang.org/x/crypto library is vulnerable to a denial of service through a panic when processing certain crafted inputs. Specifically, providing malformed wire bytes can cause the creation of an ed25519.PrivateKey , which leads to a panic during subsequent use. This vulnerability impacts seve...

CVE-2026-78662

A vulnerability exists where a channel registered in the mux's chanList was not usable until established, allowing a malicious peer to flood incomingRequests and deadlock the entire connection . The issue is addressed by adding an atomic established state ; once set, the handlePacket function dro...

CVE-2025-58181

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified, leading to unbounded memory consumption (CWE-770). This vulnerability affects the golang.org/x/crypto package, as well as products including IBM Security Verify Bridge (versions 1.0.0.0 - 1.0.17...

CVE-2017-3204

CVE-2017-3204 affects the Go SSH library (golang.org/x/crypto/ssh). By default, host key verification was not performed, enabling potential man-in-the-middle attacks. The root cause is the absence of host key verification unless a HostKeyCallback is explicitly registered; this default changed in ...