​
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-42c5-p2f2-h5g8

Published

Last updated

https://images.chainguard.dev/security/CGA-42c5-p2f2-h5g8
Package

prometheus-postgres-exporter-0.10

Latest Update
Not affected
Aliases
  • CVE-2021-43565
  • GHSA-gwc9-m7rh-j2ww

Severity

7.5

High

CVSS V3

Summary

x/crypto/ssh vulnerable to panic via malformed packets

Description

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an unauthenticated attacker to panic an SSH server. When using AES-GCM or ChaCha20Poly1305, consuming a malformed packet which contains an empty plaintext causes a panic.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images