Vulnerability GO-2025-3487

Unknown

1 year ago

Potential denial of service in golang.org/x/crypto

v0.1.0 - v0.34.0

Summary

Potential denial of service in golang.org/x/crypto

Details

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

References

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Unknown

2 months ago

Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

v0.1.0 - v0.55.0 GO-2026-6354

Unknown

2 months ago

Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh

v0.1.0 - v0.55.0 GO-2026-6355

Unknown

2 months ago

Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh

v0.1.0 - v0.54.0 GO-2026-6303

Unknown

4 months ago

The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

v0.1.0 - v0.58.0 GO-2026-5932

Critical

4 months ago

golang.org/x/crypto: Invoking VerifiedPublicKeyCallback permissions skip enforcement

v0.1.0 - v0.51.0 GHSA-x527-x647-q7gg

View all vulnerabilities for these packages

Impacted packages

golang.org/x/crypto

Timeline

Published

1 year ago

Fixed (v0.35.0)

1 year ago

Last Modified

6 hours ago