CVE-2021-43565

Panic on malformed packets in golang.org/x/crypto/ssh

Description

Unauthenticated clients can cause a panic in SSH servers.

When using AES-GCM or ChaCha20Poly1305, consuming a malformed packet which contains an empty plaintext causes a panic.

Patch Available

Fix available through Seal Security.  
No upgrade required, protect your application instantly.

Fix without upgrading

Score

Severity

Ecosystem

GO

Publish Date

September 12, 2022

Modified Date

May 20, 2024

Score Vector

Affected Versions