Veracode Vulnerability DatabaseVERACODE:22548Signature Verification With Malformed Public Keys
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
github.com/golang/crypto is vulnerable to signature verification with malformed public keys. The vulnerability exists because it does not handle malformed ed25519 public keys properly, allowing a malicious SSH client to provide malicious a ssh-ed25519 or [email protected] public keys to panic any SSH servers with PublicKeyCallback during signature verification. SSH servers can also deliver such keys to any golang.org/x/crypto/ssh clients.
References
packetstormsecurity.com/files/156480/Go-SSH-0.0.2-Denial-Of-Service.html
github.com/golang/crypto/commit/bac4c82f6975
go-review.googlesource.com/c/crypto/+/220357
groups.google.com/forum/#!topic/golang-announce/3L45YRc91SY
lists.debian.org/debian-lts-announce/2020/10/msg00014.html
lists.debian.org/debian-lts-announce/2020/11/msg00027.html
lists.debian.org/debian-lts-announce/2020/11/msg00031.html
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P