CVE-2025-47914
Medium · 5.3golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
CVSS
5.3
EPSS
0.5%
Published
Nov 19, 2025
CISA due date
—
The record
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | golang.org/x/crypto | 0 | 0.45.0 |
| Chainguard | aactl | 0 | 0.4.12-r38 |
| Chainguard | actions-runner-controller | 0 | 0.13.0-r1 |
| Chainguard | actions-runner-controller-compat | 0 | 0.13.0-r1 |
| Chainguard | actions-runner-controller-fips | 0 | 0.13.0-r2 |
| Chainguard | actions-runner-controller-fips-compat | 0 | 0.13.0-r2 |
| Chainguard | age | 0 | 1.2.1-r9 |
| Chainguard | age-fips | 0 | 1.2.1-r10 |
| Chainguard | agentbeat | 0 | 0 |
| Chainguard | agentbeat-fips | 0 | 0 |
| Chainguard | amass | 0 | 5.0.1-r2 |
| Chainguard | amazon-cloudwatch-agent | 0 | 1.300062.0-r1 |
| Chainguard | amazon-cloudwatch-agent-amazon-cloudwatch-agent-config-wizard-fips | 0 | 1.300062.0-r1 |
| Chainguard | amazon-cloudwatch-agent-config-downloader | 0 | 1.300062.0-r1 |
| Chainguard | amazon-cloudwatch-agent-config-downloader-fips | 0 | 1.300062.0-r1 |
| Chainguard | amazon-cloudwatch-agent-config-translator-fips | 0 | 1.300062.0-r1 |
| Chainguard | amazon-cloudwatch-agent-fips | 0 | 1.300062.0-r1 |
| Chainguard | amazon-cloudwatch-agent-operator | 0 | 3.3.0-r2 |
| Chainguard | amazon-cloudwatch-agent-operator-compat | 0 | 3.3.0-r2 |
| Chainguard | amazon-cloudwatch-agent-operator-fips | 0 | 0 |
| Chainguard | amazon-cloudwatch-agent-operator-fips-compat | 0 | 0 |
| Chainguard | amazon-cloudwatch-agent-start-amazon-cloudwatch-agent | 0 | 1.300062.0-r1 |
| Chainguard | amazon-cloudwatch-agent-start-amazon-cloudwatch-agent-fips | 0 | 1.300062.0-r1 |
| Chainguard | amazon-ssm-agent | 0 | 3.3.3270.0-r2 |
| Chainguard | amazon-ssm-agent-ecs-exec | 0 | 3.3.3270.0-r2 |
| Chainguard | amazon-ssm-agent-ecs-exec-fips | 0 | 0 |
| Chainguard | amazon-ssm-agent-fips | 0 | 0 |
| Chainguard | apache-exporter | 0 | 1.0.11-r1 |
| Chainguard | apisix-ingress-controller | 0 | 1.8.4-r5 |
| Chainguard | apisix-ingress-controller-compat | 0 | 1.8.4-r5 |
| Chainguard | apisix-ingress-controller-iamguarded-compat | 0 | 1.8.4-r5 |
| Chainguard | apm-server-7.17 | 0 | 0 |
| Chainguard | apm-server-7.17-compat | 0 | 0 |
| Chainguard | apm-server-8.17 | 0 | 8.17.10-r3 |
| Chainguard | apm-server-8.17-compat | 0 | 8.17.10-r3 |
| Chainguard | apm-server-8.18 | 0 | 8.18.8-r2 |
| Chainguard | apm-server-8.19 | 0 | 8.19.7-r1 |
| Chainguard | apm-server-8.19-compat | 0 | 8.19.7-r1 |
| Chainguard | apm-server-9.0 | 0 | 0 |
| Chainguard | apm-server-9.0-compat | 0 | 0 |
| Chainguard | apm-server-9.1 | 0 | 9.1.7-r1 |
| Chainguard | apm-server-9.1-compat | 0 | 9.1.7-r1 |
| Chainguard | apm-server-9.2 | 0 | 0 |
| Chainguard | apm-server-9.2-compat | 0 | 0 |
| Chainguard | apm-server-fips-7.17 | 0 | 7.17.29-r6 |
| Chainguard | apm-server-fips-7.17-compat | 0 | 7.17.29-r6 |
| Chainguard | apm-server-fips-8.17 | 0 | 8.17.10-r2 |
| Chainguard | apm-server-fips-8.17-compat | 0 | 8.17.10-r2 |
| Chainguard | argo-cd-2.14-compat | 0 | 2.14.21-r3 |
| Chainguard | argo-cd-3.0 | 0 | 3.0.20-r3 |
| Chainguard | argo-cd-3.0-compat | 0 | 3.0.20-r3 |
| Chainguard | argo-cd-3.0-iamguarded-compat | 0 | 3.0.20-r3 |
| Chainguard | argo-cd-3.0-repo-server | 0 | 3.0.20-r3 |
| Chainguard | argo-cd-3.1-compat | 0 | 3.1.9-r3 |
| Chainguard | argo-cd-3.1-iamguarded-compat | 0 | 3.1.9-r3 |
| Chainguard | argo-cd-3.1-repo-server | 0 | 3.1.9-r3 |
| Chainguard | argo-cd-3.2 | 0 | 3.2.0-r1 |
| Chainguard | argo-cd-3.2-compat | 0 | 3.2.0-r1 |
| Chainguard | argo-cd-3.2-iamguarded-compat | 0 | 3.2.0-r1 |
| Chainguard | argo-cd-3.2-repo-server | 0 | 3.2.0-r1 |
| Chainguard | argo-cd-fips-2.14-compat | 0 | 2.14.21-r2 |
| Chainguard | argo-cd-fips-3.0 | 0 | 0 |
| Chainguard | argo-cd-fips-3.0-compat | 0 | 0 |
| Chainguard | argo-cd-fips-3.0-iamguarded-compat | 0 | 0 |
| Chainguard | argo-cd-fips-3.0-repo-server | 0 | 0 |
| Chainguard | argo-cd-fips-3.1 | 0 | 3.1.9-r5 |
| Chainguard | argo-cd-fips-3.1-compat | 0 | 3.1.9-r5 |
| Chainguard | argo-cd-fips-3.1-iamguarded-compat | 0 | 3.1.9-r5 |
| Chainguard | argo-cd-fips-3.1-repo-server | 0 | 3.1.9-r5 |
| Chainguard | argo-cd-fips-3.2 | 0 | 0 |
| Chainguard | argo-cd-fips-3.2-compat | 0 | 0 |
| Chainguard | argo-cd-fips-3.2-iamguarded-compat | 0 | 0 |
| Chainguard | argo-cd-fips-3.2-repo-server | 0 | 0 |
| Chainguard | argo-events | 0 | 1.9.8-r2 |
| Chainguard | argo-events-compat | 0 | 1.9.8-r2 |
| Chainguard | argo-events-fips | 0 | 0 |
| Chainguard | argo-events-fips-compat | 0 | 0 |
| Chainguard | argo-rollouts | 0 | 1.8.3-r5 |
| Chainguard | argo-rollouts-compat | 0 | 1.8.3-r5 |
| Chainguard | argo-rollouts-fips | 0 | 1.8.3-r6 |
| Chainguard | argo-workflow-cli-fips-3.6 | 0 | 3.6.13-r1 |
| Chainguard | argo-workflow-cli-fips-3.7 | 0 | 3.7.4-r1 |
| Chainguard | argo-workflow-controller-3.6-compat-fips | 0 | 3.6.13-r1 |
| Chainguard | argo-workflow-controller-3.7 | 0 | 3.7.4-r1 |
| Chainguard | argo-workflow-controller-3.7-compat-fips | 0 | 3.7.4-r1 |
| Chainguard | argo-workflow-controller-fips-3.6 | 0 | 3.6.13-r1 |
| Chainguard | argo-workflow-controller-fips-3.7 | 0 | 3.7.4-r1 |
| Chainguard | argo-workflow-executor-3.7-compat-fips | 0 | 3.7.4-r1 |
| Chainguard | argo-workflow-executor-fips-3.6 | 0 | 3.6.13-r1 |
| Chainguard | argo-workflow-executor-fips-3.7 | 0 | 3.7.4-r1 |
| Chainguard | argo-workflows-fips-3.6 | 0 | 3.6.13-r1 |
| Chainguard | argo-workflows-fips-3.7 | 0 | 3.7.4-r1 |
| Chainguard | argo-workflows-known-hosts-fips-3.6 | 0 | 3.6.13-r1 |
| Chainguard | argo-workflows-known-hosts-fips-3.7 | 0 | 3.7.4-r1 |
| Chainguard | argocd-image-updater | 0 | 1.0.1-r1 |
| Chainguard | argocd-image-updater-fips | 0 | 1.0.1-r1 |
| Chainguard | atlantis | 0 | 0.37.1-r1 |
| Chainguard | atlantis-fips | 0 | 0.37.1-r1 |
| Chainguard | atlas-1.0 | 0 | 0 |
| Chainguard | atlas-1.0-fips | 0 | 0 |
| Chainguard | atlas-1.1 | 0 | 0 |
| Chainguard | atlas-1.1-fips | 0 | 0 |
| Chainguard | auditbeat-7 | 0 | 7.17.29-r6 |
| Chainguard | auditbeat-7-oci-entrypoint | 0 | 7.17.29-r6 |
| Chainguard | auditbeat-8.17 | 0 | 8.17.10-r3 |
| Chainguard | auditbeat-8.17-oci-entrypoint | 0 | 8.17.10-r3 |
| Chainguard | auditbeat-8.18 | 0 | 8.18.8-r3 |
| Chainguard | auditbeat-8.18-oci-entrypoint | 0 | 8.18.8-r3 |
| Chainguard | auditbeat-8.19 | 0 | 8.19.7-r1 |
| Chainguard | auditbeat-8.19-oci-entrypoint | 0 | 8.19.7-r1 |
| Chainguard | auditbeat-9.0 | 0 | 9.0.8-r3 |
| Chainguard | auditbeat-9.0-oci-entrypoint | 0 | 9.0.8-r3 |
| Chainguard | auditbeat-9.1 | 0 | 9.1.8-r0 |
| Chainguard | auditbeat-9.1-oci-entrypoint | 0 | 9.1.8-r0 |
| Chainguard | auditbeat-9.2 | 0 | 9.2.1-r1 |
| Chainguard | auditbeat-9.2-oci-entrypoint | 0 | 9.2.1-r1 |
| Chainguard | auditbeat-fips-7 | 0 | 7.17.29-r7 |
| Chainguard | auditbeat-fips-8.17 | 0 | 0 |
| Chainguard | auditbeat-fips-8.18 | 0 | 0 |
| Chainguard | auditbeat-fips-8.19 | 0 | 0 |
| Chainguard | auditbeat-fips-9.0 | 0 | 0 |
| Chainguard | auditbeat-fips-9.1 | 0 | 0 |
| Chainguard | auditbeat-fips-9.2 | 0 | 0 |
| Chainguard | authentik | 0 | 0 |
| Chainguard | authentik-go-server | 0 | 0 |
| Chainguard | authservice | 0 | 1.1.2-r1 |
| Chainguard | authservice-compat | 0 | 1.1.2-r1 |
| Chainguard | authservice-fips | 0 | 1.1.3-r0 |
| Chainguard | authservice-fips-compat | 0 | 1.1.3-r0 |
| Chainguard | aws-node-termination-handler | 0 | 1.25.3-r1 |
| Chainguard | aws-node-termination-handler-fips | 0 | 1.25.3-r1 |
| Chainguard | aws-node-termination-handler-fips-compat | 0 | 1.25.3-r1 |
| Chainguard | aws-otel-collector | 0 | 0.45.1-r1 |
| Chainguard | aws-otel-collector-fips | 0 | 0.45.1-r2 |
| Chainguard | aws-otel-collector-fips-healthcheck | 0 | 0.45.1-r2 |
| Chainguard | aws-otel-collector-healthcheck-fips | 0 | 0.45.1-r2 |
| Chainguard | azcopy | 0 | 10.31.0-r1 |
| Chainguard | azcopy-fips | 0 | 0 |
| Chainguard | azure-aad-pod-identity-mic | 0 | 1.8.17-r30 |
| Chainguard | azure-aad-pod-identity-nmi | 0 | 1.8.17-r30 |
| Chainguard | azure-container-networking | 0 | 0 |
| Chainguard | azure-ipam | 0 | 0.4.0-r5 |
| Chainguard | azure-ipam-dropgz | 0 | 0.4.0-r5 |
| Chainguard | azure-service-operator | 0 | 0 |
| Chainguard | azure-service-operator-compat | 0 | 0 |
| Chainguard | azure-service-operator-fips | 0 | 0 |
| Chainguard | azure-vnet-cni | 0 | 0 |
| Chainguard | azure-workload-identity-webhook | 0 | 1.5.1-r4 |
| Chainguard | azure-workload-identity-webhook-compat | 0 | 1.5.1-r4 |
| Chainguard | azuredisk-csi-1.28 | 0 | 1.28.12-r10 |
| Chainguard | azuredisk-csi-1.28-compat | 0 | 1.28.12-r10 |
| Chainguard | azuredisk-csi-1.30 | 0 | 1.30.12-r8 |
| Chainguard | azuredisk-csi-1.30-compat | 0 | 1.30.12-r8 |
| Chainguard | azuredisk-csi-1.31 | 0 | 0 |
| Chainguard | azuredisk-csi-1.31-compat | 0 | 0 |
| Chainguard | azuredisk-csi-1.32 | 0 | 1.32.11-r4 |
| Chainguard | azuredisk-csi-1.32-compat | 0 | 1.32.11-r4 |
| Chainguard | azuredisk-csi-1.33 | 0 | 1.33.6-r1 |
| Chainguard | azuredisk-csi-1.33-compat | 0 | 1.33.6-r1 |
| Chainguard | azuredisk-csi-fips-1.28 | 0 | 1.28.12-r9 |
| Chainguard | azuredisk-csi-fips-1.29 | 0 | 0 |
| Chainguard | azuredisk-csi-fips-1.30 | 0 | 1.30.12-r7 |
| Chainguard | azuredisk-csi-fips-1.31 | 0 | 1.31.12-r4 |
| Chainguard | azuredisk-csi-fips-1.32 | 0 | 1.32.11-r4 |
| Chainguard | azurefile-csi-1.29 | 0 | 1.29.12-r8 |
| Chainguard | azurefile-csi-1.29-compat | 0 | 1.29.12-r8 |
| Chainguard | azurefile-csi-1.30 | 0 | 0 |
| Chainguard | azurefile-csi-1.31 | 0 | 1.31.8-r4 |
| Chainguard | azurefile-csi-1.31-compat | 0 | 1.31.8-r4 |
| Chainguard | azurefile-csi-1.32 | 0 | 1.32.8-r1 |
| Chainguard | azurefile-csi-1.33 | 0 | 1.33.6-r1 |
| Chainguard | azurefile-csi-1.33-compat | 0 | 1.33.6-r1 |
| Chainguard | azurefile-csi-fips-1.30 | 0 | 0 |
| Chainguard | azurefile-csi-fips-1.30-compat | 0 | 0 |
| Chainguard | azurefile-csi-fips-1.31 | 0 | 0 |
| Chainguard | azurefile-csi-fips-1.31-compat | 0 | 0 |
| Chainguard | azurefile-csi-fips-1.32 | 0 | 1.32.8-r1 |
| Chainguard | azurefile-csi-fips-1.32-compat | 0 | 1.32.8-r1 |
| Chainguard | azurefile-csi-fips-1.33 | 0 | 1.33.6-r1 |
| Chainguard | bank-vaults-fips | 0 | 1.20.4-r34 |
| Chainguard | bank-vaults-template | 0 | 1.32.0-r3 |
| Chainguard | bank-vaults-template-fips | 0 | 1.20.4-r34 |
| Chainguard | beats-8.17 | 0 | 8.17.10-r3 |
| Chainguard | beats-8.18 | 0 | 8.18.8-r3 |
| Chainguard | beats-8.19 | 0 | 8.19.7-r1 |
| Chainguard | beats-9.0 | 0 | 9.0.8-r3 |
| Chainguard | beats-9.1 | 0 | 9.1.8-r0 |
| Chainguard | beats-9.2 | 0 | 9.2.1-r1 |
| Chainguard | beats-fips-7 | 0 | 7.17.29-r7 |
| Chainguard | beats-fips-8.17 | 0 | 0 |
| Chainguard | beats-fips-8.18 | 0 | 0 |
| Chainguard | beats-fips-8.19 | 0 | 0 |
| Chainguard | beats-fips-9.0 | 0 | 0 |
| Chainguard | beats-fips-9.1 | 0 | 0 |
| Chainguard | beats-fips-9.2 | 0 | 0 |
| Chainguard | bento | 0 | 1.12.1-r3 |
| Chainguard | bento-compat | 0 | 1.12.1-r3 |
| Chainguard | blob-csi-1.23 | 0 | 1.23.11-r58 |
| Chainguard | blob-csi-1.24 | 0 | 0 |
| Chainguard | blob-csi-1.24-compat | 0 | 0 |
Related vulnerabilities
- CVE-2025-58181 golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption Also affects golang.org/x/crypto
- CVE-2025-47913 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and… Also affects golang.org/x/crypto
- CVE-2024-45337 Applications and libraries which misuse connection.serverAuthenticate (via callback field… Also affects golang.org/x/crypto
- CVE-2023-48795 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… Also affects golang.org/x/crypto
- CVE-2021-43565 The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto… Also affects golang.org/x/crypto
- CVE-2022-27191 The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go… Also affects golang.org/x/crypto
- CVE-2020-9283 golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic… Also affects golang.org/x/crypto
- CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC. Also affects aactl