Golang.Org X Crypto Golang.Org X Crypto Ssh vulnerabilities

CVE-2024-45337 [CRITICAL] CVE-2024-45337: Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConf Applications and libraries which misuse connection.serverAuthenticate (via callback field ServerConfig.PublicKeyCallback) may be susceptible to an authorization bypass. The documentation for ServerConfig.PublicKeyCallback says that "A call to this function does not guarantee that the key offered is in fact used to authenticate." Specifically, the SSH prot

CVE-2026-39830 [CRITICAL] CWE-119 CVE-2026-39830: A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blo A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.

CVE-2026-39834 [CRITICAL] CWE-190 CVE-2026-39834: When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in t When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.

CVE-2026-39831 [CRITICAL] CWE-862 CVE-2026-39831: The Verify() method for FIDO/U2F security key types ([email protected], sk-ssh-ed25 The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a "no-touch-required" extension in Permiss

CVE-2026-39829 [HIGH] CWE-347 CVE-2026-39829: The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public k The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 b

CVE-2026-46597 [HIGH] CWE-704 CVE-2026-46597: An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet dec An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

CVE-2025-22869 [HIGH] CWE-770 CVE-2025-22869: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack fro SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

CVE-2026-39828 [MEDIUM] CWE-295 CVE-2026-39828: When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, th When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.

CVE-2026-39827 [MEDIUM] CWE-924 CVE-2026-39827: An authenticated SSH client that repeatedly opened channels which were rejected by the server caused An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state and released for garbage collection.

CVE-2025-58181 [MEDIUM] CWE-770 CVE-2025-58181: SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specifie SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

CVE-2026-39835 [MEDIUM] CWE-295 CVE-2026-39835: SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHost SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.