CVE-2026-4254
published 2026-03-16CVE-2026-4254: A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the…
PriorityP270critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.37%
71.7th percentile
A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoint. This manipulation of the argument local_2c causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8 | — | — |
| tenda | ac8_firmware | <= 16.03.50.11 | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv4.08.9HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_redhat7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7ppq-fx8r-g889: A weakness has been identified in Tenda AC8 up to 16
ghsa_unreviewed·2026-03-16
CVE-2026-4254 [HIGH] CWE-119 GHSA-7ppq-fx8r-g889: A weakness has been identified in Tenda AC8 up to 16
A weakness has been identified in Tenda AC8 up to 16.03.50.11. This vulnerability affects the function doSystemCmd of the file /goform/SysToolChangePwd of the component HTTP Endpoint. This manipulation of the argument local_2c causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Red Hat
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages
vendor_redhat·2026-09-02·CVSS 7.5
CVE-2026-56855 [HIGH] CWE-833 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages
golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
A flaw was found in golang.org/x/crypto/ssh. After a channel has been established, a remote malicious peer could send specially crafted messages. This could lead to a deadlock of the entire connection, resulting in a Denial of Service (DoS) for the affected system.
Statement: A malicious SSH peer can send crafted channel messages after a connection is established, ca
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-56855 cri-o1.37: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-10-13·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 cri-o1.37: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 cri-o1.37: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 kubernetes1.37: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-10-13·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 kubernetes1.37: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 kubernetes1.37: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 podman: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 podman: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 podman: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 cri-o1.34: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 cri-o1.34: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 cri-o1.34: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 forgejo: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 forgejo: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 forgejo: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 DankMaterialShell: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 DankMaterialShell: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 DankMaterialShell: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 gvisor-tap-vsock: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 gvisor-tap-vsock: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 gvisor-tap-vsock: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 gopass-jsonapi: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 gopass-jsonapi: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 gopass-jsonapi: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 kubernetes1.35: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 kubernetes1.35: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 kubernetes1.35: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 vagrant: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 vagrant: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 vagrant: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Discussion:
Vagrant does not ship any Golang bits => CLOSED NOTABUG
Bugzilla
CVE-2026-56855 golang-github-cloudflare-redoctober: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 golang-github-cloudflare-redoctober: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 golang-github-cloudflare-redoctober: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 nebula: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 nebula: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 nebula: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 vhs: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 vhs: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 vhs: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 caddy: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 caddy: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 caddy: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 chezmoi: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 chezmoi: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 chezmoi: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 forgejo: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 forgejo: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 forgejo: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 opkssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 opkssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 opkssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 matterbridge: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 matterbridge: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 matterbridge: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 golang-github-francoispqt-gojay: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 golang-github-francoispqt-gojay: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 golang-github-francoispqt-gojay: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 apptainer: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 apptainer: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 apptainer: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 golang-x-crypto: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 golang-x-crypto: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 golang-x-crypto: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 gh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 gh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 gh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 openbao: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 openbao: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 openbao: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 docker-compose: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 docker-compose: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 docker-compose: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 docker-buildx: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 docker-buildx: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 docker-buildx: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 gh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 gh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 gh: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 pack: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 pack: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 pack: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 gopass-hibp: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 gopass-hibp: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 gopass-hibp: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 inspektor-gadget: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 inspektor-gadget: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 inspektor-gadget: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 kubernetes1.30: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 kubernetes1.30: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 kubernetes1.30: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 nuclei: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 nuclei: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 nuclei: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 transifex-client: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 transifex-client: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 transifex-client: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 cri-o1.30: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 cri-o1.30: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 cri-o1.30: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 trivy: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 trivy: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 trivy: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 google-osconfig-agent: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 google-osconfig-agent: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 google-osconfig-agent: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 golang-github-facebookincubator-go2chef: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 golang-github-facebookincubator-go2chef: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 golang-github-facebookincubator-go2chef: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 docker-buildkit: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 docker-buildkit: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 docker-buildkit: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 gopass: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 gopass: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 gopass: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 google-guest-agent: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 google-guest-agent: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 google-guest-agent: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 cri-o: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 cri-o: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 cri-o: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 cri-o1.33: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 cri-o1.33: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 cri-o1.33: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 moby-engine: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 moby-engine: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 moby-engine: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 mockery: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 mockery: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 mockery: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Discussion:
Not reported by govulncheck
Bugzilla
CVE-2026-56855 golang-x-crypto: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 golang-x-crypto: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
CVE-2026-56855 golang-x-crypto: golang.org/x/crypto/ssh: Denial of Service via crafted messages [epel-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 k9s: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 k9s: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 k9s: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 openbao: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 openbao: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 openbao: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
Bugzilla
CVE-2026-56855 cri-o1.32: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
bugzilla·2026-09-09·CVSS 7.5
CVE-2026-56855 [HIGH] CVE-2026-56855 cri-o1.32: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
CVE-2026-56855 cri-o1.32: golang.org/x/crypto/ssh: Denial of Service via crafted messages [fedora-all]
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connection down instead of buffering and blocking.
2026-03-16
Published