Sign In

CVE-2020-9283

SOURCE - github

Summary

golang.org/x/crypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org/x/crypto/ssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.

EPSS Score⁠: 0.24388 (0.966)

Common Weakness Enumeration (CWE)

SOURCE - nist

CWE-347⁠

Improper Verification of Cryptographic Signature

SOURCE - github

CWE-347⁠

Improper Verification of Cryptographic Signature

SOURCE - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-347⁠

Improper Verification of Cryptographic Signature

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

SOURCE - redhat

CWE-130⁠

Improper Handling of Length Parameter Inconsistency

Sources (10)

Impacted images

nist

CREATED

UPDATED

SOURCE IDCVE-2020-9283⁠
EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND
COMMON WEAKNESS ENUMERATION (CWE)
CWE-347⁠

CVSS SCORE

7.5high

github

CREATED

UPDATED

SOURCE IDGHSA-ffhg-7mh4-33c4⁠
EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-347⁠

CVSS SCORE

7.5high

debian

CREATED

UPDATED

SOURCE IDCVE-2020-9283⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE

ubuntu

CREATED

UPDATED

SOURCE IDCVE-2020-9283⁠
EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

7.5medium

golang

CREATED

UPDATED

SOURCE IDGO-2020-0012⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE

gitlab

CREATED

UPDATED

SOURCE ID

CVE-2020-9283

EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-1035⁠CWE-347⁠CWE-937⁠

CVSS SCORE

7.5high

redhat

CREATED

UPDATED

SOURCE IDCVE-2020-9283⁠
EXPLOITABILITY SCORE

3.9

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CWE-130⁠

CVSS SCORE

7.5high

chainguard

CREATED

UPDATED

SOURCE ID

CVE-2020-9283

EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE

wolfi

CREATED

UPDATED

SOURCE ID

CVE-2020-9283

EXPLOITABILITY SCORE

-

EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE

inthewild

CREATED

UPDATED

SOURCE IDCVE-2020-9283⁠
EXPLOITABILITY SCORE

-

EXPLOITS FOUND

-

COMMON WEAKNESS ENUMERATION (CWE)-
RATING UNAVAILABLE FROM SOURCE