Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-27191

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 4.3
References
Products affected by CVE-2022-27191
  • cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0
  • Golang » Ssh » Version: 0.0.0-20200622213623-75b288015ac9
    cpe:2.3:a:golang:ssh:0.0.0-20200622213623-75b288015ac9
  • Golang » Ssh » Version: 0.0.0-20201203163018-be400aefbc4c
    cpe:2.3:a:golang:ssh:0.0.0-20201203163018-be400aefbc4c
  • Golang » Ssh » Version: 0.0.0-20201216223049-8b5274cf687f
    cpe:2.3:a:golang:ssh:0.0.0-20201216223049-8b5274cf687f
  • Golang » Ssh » Version: 0.0.0-20201217014255-9d1352758620
    cpe:2.3:a:golang:ssh:0.0.0-20201217014255-9d1352758620
  • Golang » Ssh » Version: 0.0.0-20201221181555-eec23a3978ad
    cpe:2.3:a:golang:ssh:0.0.0-20201221181555-eec23a3978ad
  • Golang » Ssh » Version: 0.0.0-20210421170649-83a5a9bb288b
    cpe:2.3:a:golang:ssh:0.0.0-20210421170649-83a5a9bb288b
  • Golang » Ssh » Version: 0.0.0-20210817164053-32db794688a5
    cpe:2.3:a:golang:ssh:0.0.0-20210817164053-32db794688a5
  • cpe:2.3:a:redhat:advanced_cluster_management_for_kubernetes:2.0
  • Fedoraproject » Fedora » Version: 34
    cpe:2.3:o:fedoraproject:fedora:34
  • Fedoraproject » Fedora » Version: 35
    cpe:2.3:o:fedoraproject:fedora:35
  • Fedoraproject » Fedora » Version: 36
    cpe:2.3:o:fedoraproject:fedora:36
  • Redhat » Enterprise Linux » Version: 7.0
    cpe:2.3:o:redhat:enterprise_linux:7.0
  • Redhat » Enterprise Linux » Version: 8.0
    cpe:2.3:o:redhat:enterprise_linux:8.0


Contact Us

Shodan ® - All rights reserved