CVE-2022-27191
High · 7.5CVSS
7.5
EPSS
3.9%
Published
Mar 18, 2022
CISA due date
—
Cloudanix analysis
Next patch cycle
SSVC: Track
A flaw in certain SSH server software lets anyone on the network crash the server, causing temporary loss of access until it is restarted.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Library
- Class
- Denial of service
- Remediation
- Upgrade
- Effort
- Low
- Patch risk
- Low
What it actually does
The flaw permits an unauthenticated remote attacker to supply crafted data during host key addition that triggers a panic and immediate crash of the SSH server process.
Why it matters to the business
Successful exploitation causes abrupt service outages and loss of availability for any systems exposing the vulnerable SSH implementation, leading to operational disruption until the service is restarted.
How an attack unfolds
An attacker connects to the affected SSH server and sends a specially constructed host key payload to the AddHostKey function; the package fails to validate the input, causing a panic that terminates the server process.
How to fix it
Upgrade the golang.org/x/crypto/ssh dependency to version 0.0.0-20220314234659-1baeb1ce4c0b or later; for affected packages the fix is present in commit 2c14baaf8dbc7fd82d5c585f2fa0c23528450618.
How to confirm the fix worked
Confirm the dependency version in go.mod or vendor directory shows at least commit 2c14baaf8dbc7fd82d5c585f2fa0c23528450618; recompile and test that AddHostKey no longer panics on the previously crashing input.
Typical attack path
- Identify a reachable SSH endpoint using the vulnerable golang.org/x/crypto/ssh package
- Establish a TCP connection and begin the SSH handshake
- Send a malicious host key structure via the AddHostKey code path
- Trigger the unhandled panic that crashes the server
How to detect it
Review application and system logs for unexpected SSH server process terminations or Go runtime panic messages around the time of connection attempts; correlate with network logs showing new SSH sessions immediately preceding the crash.
What your security team should do
- Prioritize patching the SSH crypto dependency across all Go services within the next maintenance window
- Add the fixed commit hash to dependency scanning policies to prevent regression
- Monitor for availability alerts on SSH-exposed services until all instances are updated
The record
The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | golang.org/x/crypto | 0 | 0.0.0-20220314234659-1baeb1ce4c0b |
| AlmaLinux:8 | aardvark-dns | 0 | 2:1.0.1-35.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | buildah | 0 | 1:1.24.5-2.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | buildah-tests | 0 | 1:1.24.5-2.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | cockpit-podman | 0 | 46-1.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | conmon | 0 | 2:2.1.4-1.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | container-selinux | 0 | 2:2.189.0-1.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | containernetworking-plugins | 0 | 1:1.1.1-2.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | containers-common | 0 | 2:1-35.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | crit | 0 | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | crit | 0 | 3.15-3.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | criu | 0 | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | criu | 0 | 3.15-3.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | criu-devel | 0 | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | criu-devel | 0 | 3.15-3.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | criu-libs | 0 | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | criu-libs | 0 | 3.15-3.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | crun | 0 | 1.5-1.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | fuse-overlayfs | 0 | 1.9-1.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | libslirp | 0 | 4.4.0-1.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | libslirp | 0 | 4.4.0-1.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | libslirp-devel | 0 | 4.4.0-1.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | libslirp-devel | 0 | 4.4.0-1.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | netavark | 0 | 2:1.0.1-35.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 0 | 1.2.5-1.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | podman | 0 | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | podman-catatonit | 0 | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | podman-docker | 0 | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | podman-gvproxy | 0 | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | podman-plugins | 0 | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | podman-remote | 0 | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | podman-tests | 0 | 2:4.0.2-8.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | python3-criu | 0 | 3.15-3.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | python3-criu | 0 | 3.15-3.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | python3-podman | 0 | 4.0.0-1.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | runc | 0 | 1:1.1.4-1.module_el8.7.0+3344+484dae7b |
| AlmaLinux:8 | skopeo | 0 | 2:1.6.2-5.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | skopeo-tests | 0 | 2:1.6.2-5.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | slirp4netns | 0 | 1.1.8-2.module_el8.6.0+2877+8e437bf5 |
| AlmaLinux:8 | slirp4netns | 0 | 1.1.8-2.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:8 | toolbox | 0 | 0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | toolbox-tests | 0 | 0.0.99.3-0.5.module_el8.7.0+3344+5bcd850f |
| AlmaLinux:8 | udica | 0 | 0.2.6-3.module_el8.6.0+2886+d33c3efb |
| AlmaLinux:8 | udica | 0 | 0.2.6-3.module_el8.6.0+3137+d33c3efb |
| AlmaLinux:9 | buildah | 0 | 1:1.27.0-2.el9 |
| AlmaLinux:9 | buildah-tests | 0 | 1:1.27.0-2.el9 |
| AlmaLinux:9 | podman | 0 | 2:4.2.0-3.el9 |
| AlmaLinux:9 | podman-docker | 0 | 2:4.2.0-3.el9 |
| AlmaLinux:9 | podman-gvproxy | 0 | 2:4.2.0-3.el9 |
| AlmaLinux:9 | podman-plugins | 0 | 2:4.2.0-3.el9 |
| AlmaLinux:9 | podman-remote | 0 | 2:4.2.0-3.el9 |
| AlmaLinux:9 | podman-tests | 0 | 2:4.2.0-3.el9 |
| Chainguard | dynamic-localpv-provisioner | 0 | 3.4.1-r3 |
| Chainguard | dynamic-localpv-provisioner-fips | 0 | 3.5.0-r0 |
| Chainguard | eks-distro-coredns-1.8 | 0 | 1.8.7-r5 |
| Chainguard | k3d | 0 | 5.6.0-r11 |
| Chainguard | k3d-proxy | 0 | 5.6.0-r11 |
| Chainguard | k3d-tools | 0 | 5.6.0-r11 |
| Chainguard | kubeflow | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-access-management | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-access-management-compat | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-access-management-fips | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-access-management-fips-compat | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-admission-webhook | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-admission-webhook-compat | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-admission-webhook-fips | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-admission-webhook-fips-compat | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-fips | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-notebook-controller | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-notebook-controller-compat | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-notebook-controller-fips | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-notebook-controller-fips-compat | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-profile-controller | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-profile-controller-compat | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-profile-controller-fips | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-profile-controller-fips-compat | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-pvcviewer-controller | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-pvcviewer-controller-compat | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-pvcviewer-controller-fips | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-pvcviewer-controller-fips-compat | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-tensorboard-controller | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-tensorboard-controller-compat | 0 | 1.10.0-r4 |
| Chainguard | kubeflow-tensorboard-controller-fips | 0 | 1.10.0-r2 |
| Chainguard | kubeflow-tensorboard-controller-fips-compat | 0 | 1.10.0-r2 |
| Chainguard | prometheus-postgres-exporter-0.10 | 0 | 0 |
| Chainguard | py3-seldon-core-1.16 | 0 | 1.16.0-r6 |
| Chainguard | seldon-core-operator-1.16 | 0 | 1.16.0-r1 |
| Chainguard | seldon-core-operator-compat | 0 | 1.16.0-r6 |
| Chainguard | seldon-core-operator-compat-helm | 0 | 1.16.0-r1 |
| Chainguard | seldon-core-operator-fips | 0 | 1.16.0-r6 |
| Chainguard | terraform-provider-sendgrid | 0 | 1.0.1-r1 |
| Chainguard | terraform-provider-sendgrid-fips | 0 | 1.0.1-r1 |
| Debian:11 | golang-go.crypto | 0 | No fix |
| Debian:12 | golang-go.crypto | 0 | 1:0.0~git20220315.3147a52-1 |
| Debian:13 | golang-go.crypto | 0 | 1:0.0~git20220315.3147a52-1 |
| Mageia:8 | buildah | 0 | 1.30.0-1.mga8 |
| Mageia:8 | conmon | 0 | 2.1.5-1.mga8 |
| Mageia:8 | podman | 0 | 4.5.1-1.mga8 |
| Mageia:8 | skopeo | 0 | 1.12.0-2.mga8 |
| Red Hat:container_native_virtualization:4.11::el7 | kubevirt | 0 | 0:4.11.0-643.el7 |
| Red Hat:container_native_virtualization:4.11::el7 | kubevirt-virtctl | 0 | 0:4.11.0-643.el7 |
| Red Hat:container_native_virtualization:4.11::el7 | kubevirt-virtctl-redistributable | 0 | 0:4.11.0-643.el7 |
| Red Hat:container_native_virtualization:4.11::el8 | kubevirt | 0 | 0:4.11.0-643.el8 |
| Red Hat:container_native_virtualization:4.11::el8 | kubevirt-virtctl | 0 | 0:4.11.0-643.el8 |
| Red Hat:container_native_virtualization:4.11::el8 | kubevirt-virtctl-redistributable | 0 | 0:4.11.0-643.el8 |
| Red Hat:enterprise_linux:8::appstream | aardvark-dns | 0 | 2:1.1.0-4.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | aardvark-dns | 0 | 2:1.0.1-35.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | buildah | 0 | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | buildah | 0 | 1:1.24.5-2.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | buildah-debuginfo | 0 | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | buildah-debuginfo | 0 | 1:1.24.5-2.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | buildah-debugsource | 0 | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | buildah-debugsource | 0 | 1:1.24.5-2.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | buildah-tests | 0 | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | buildah-tests | 0 | 1:1.24.5-2.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | buildah-tests-debuginfo | 0 | 1:1.27.0-2.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | buildah-tests-debuginfo | 0 | 1:1.24.5-2.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | cockpit-podman | 0 | 0:53-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | cockpit-podman | 0 | 0:46-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | conmon | 0 | 3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | conmon | 0 | 2:2.1.4-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | conmon-debuginfo | 0 | 3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | conmon-debuginfo | 0 | 2:2.1.4-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | conmon-debugsource | 0 | 3:2.1.4-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | conmon-debugsource | 0 | 2:2.1.4-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | container-selinux | 0 | 2:2.189.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | container-selinux | 0 | 2:2.189.0-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins | 0 | 1:1.1.1-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins | 0 | 1:1.1.1-2.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 0 | 1:1.1.1-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debuginfo | 0 | 1:1.1.1-2.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 0 | 1:1.1.1-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | containernetworking-plugins-debugsource | 0 | 1:1.1.1-2.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | containers-common | 0 | 2:1-40.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | containers-common | 0 | 2:1-35.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | crit | 0 | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | crit | 0 | 0:3.15-3.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | criu | 0 | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | criu | 0 | 0:3.15-3.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | criu-debuginfo | 0 | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | criu-debuginfo | 0 | 0:3.15-3.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | criu-debugsource | 0 | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | criu-debugsource | 0 | 0:3.15-3.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | criu-devel | 0 | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | criu-devel | 0 | 0:3.15-3.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | criu-libs | 0 | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | criu-libs | 0 | 0:3.15-3.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | criu-libs-debuginfo | 0 | 0:3.15-3.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | criu-libs-debuginfo | 0 | 0:3.15-3.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | crun | 0 | 0:1.5-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | crun | 0 | 0:1.5-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | crun-debuginfo | 0 | 0:1.5-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | crun-debuginfo | 0 | 0:1.5-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | crun-debugsource | 0 | 0:1.5-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | crun-debugsource | 0 | 0:1.5-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs | 0 | 0:1.9-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs | 0 | 0:1.9-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs-debuginfo | 0 | 0:1.9-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs-debuginfo | 0 | 0:1.9-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs-debugsource | 0 | 0:1.9-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | fuse-overlayfs-debugsource | 0 | 0:1.9-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | libslirp | 0 | 0:4.4.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | libslirp | 0 | 0:4.4.0-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | libslirp-debuginfo | 0 | 0:4.4.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | libslirp-debuginfo | 0 | 0:4.4.0-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | libslirp-debugsource | 0 | 0:4.4.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | libslirp-debugsource | 0 | 0:4.4.0-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | libslirp-devel | 0 | 0:4.4.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | libslirp-devel | 0 | 0:4.4.0-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | netavark | 0 | 2:1.1.0-6.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | netavark | 0 | 2:1.0.1-35.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook | 0 | 0:1.2.6-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook | 0 | 0:1.2.5-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debuginfo | 0 | 0:1.2.6-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debuginfo | 0 | 0:1.2.5-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debugsource | 0 | 0:1.2.6-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | oci-seccomp-bpf-hook-debugsource | 0 | 0:1.2.5-1.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-catatonit | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-catatonit | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-catatonit-debuginfo | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-catatonit-debuginfo | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-debuginfo | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-debuginfo | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-debugsource | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-debugsource | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-docker | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-docker | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-gvproxy | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-gvproxy | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-gvproxy-debuginfo | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-gvproxy-debuginfo | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-plugins | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-plugins | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-plugins-debuginfo | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-plugins-debuginfo | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-remote | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
| Red Hat:enterprise_linux:8::appstream | podman-remote | 0 | 2:4.0.2-8.module+el8.7.0+16520+2db5507d |
| Red Hat:enterprise_linux:8::appstream | podman-remote-debuginfo | 0 | 3:4.2.0-1.module+el8.7.0+16772+33343656 |
Related vulnerabilities
- CVE-2025-47914 golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of… Also affects golang.org/x/crypto
- CVE-2025-58181 golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption Also affects golang.org/x/crypto
- CVE-2025-47913 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and… Also affects golang.org/x/crypto
- CVE-2024-45337 Applications and libraries which misuse connection.serverAuthenticate (via callback field… Also affects golang.org/x/crypto
- CVE-2023-48795 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… Also affects golang.org/x/crypto
- CVE-2021-43565 The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto… Also affects golang.org/x/crypto
- CVE-2020-9283 golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic… Also affects golang.org/x/crypto
- CVE-2025-52565 container escape due to /dev/console mount and related races Also affects aardvark-dns