p PatchFirst

CVE-2022-27191

CVE-2022-27191

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

CVSS 7.5 · High · EPSS 3.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • golang-go.crypto Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:0.0~git20220315.3147a52-1

    Update to 1:0.0~git20220315.3147a52-1

  • golang-go.crypto Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:0.0~git20220315.3147a52-1

    Update to 1:0.0~git20220315.3147a52-1

  • golang-go.crypto Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:0.0~git20220315.3147a52-1

    Update to 1:0.0~git20220315.3147a52-1

  • golang-go.crypto Ubuntu:Pro:16.04:LTS

    Versions
    • 1:0.0~git20150608-1
    • 1:0.0~git20151201.0.7b85b09-2
    • 1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm1
    • 1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm2
    • 1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-go.crypto Ubuntu:Pro:18.04:LTS

    Versions
    • 1:0.0~git20170629.0.5ef0053-1ubuntu1
    • 1:0.0~git20170629.0.5ef0053-1ubuntu2
    • 1:0.0~git20170629.0.5ef0053-2
    • 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm1
    • 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm2
    • 1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-go.crypto Ubuntu:Pro:20.04:LTS

    Versions
    • 1:0.0~git20190701.4def268-2
    • 1:0.0~git20200221.2aa609c-1
    • 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm1
    • 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm2
    • 1:0.0~git20200221.2aa609c-1ubuntu0.1~esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-go.crypto Ubuntu:Pro:22.04:LTS

    Versions
    • 1:0.0~git20201221.eec23a3-1
    • 1:0.0~git20211202.5770296-1
    • 1:0.0~git20211202.5770296-1ubuntu0.1~esm1
    • 1:0.0~git20211202.5770296-1ubuntu0.1~esm2
    • 1:0.0~git20211202.5770296-1ubuntu0.1~esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-go.crypto Ubuntu:Pro:24.04:LTS

    Versions
    • 1:0.4.0-1
    • 1:0.17.0-1
    • 1:0.18.0-1
    • 1:0.19.0-1
    • 1:0.19.0-1ubuntu0.1~esm1
    • 1:0.19.0-1ubuntu0.1~esm2
    • 1:0.19.0-1ubuntu0.1~esm3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-go.crypto Ubuntu:25.10

    Versions
    • 1:0.25.0-1
    • 1:0.25.0-1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-go.crypto Ubuntu:26.10

    Versions
    • 1:0.47.0-1
    • 1:0.55.0-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • golang-go.crypto Ubuntu:Pro:26.04:LTS

    Versions
    • 1:0.25.0-1
    • 1:0.45.0-1
    • 1:0.47.0-1
    • 1:0.47.0-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →