The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
| Software | From | Fixed in |
|---|---|---|
| golang / ssh | - | 0.0.0-20220314234659-1baeb1ce4c0b |
| fedoraproject / fedora | 34 | 34.x |
| fedoraproject / extra_packages_for_enterprise_linux | 8.0 | 8.0.x |
| fedoraproject / fedora | 35 | 35.x |
| fedoraproject / fedora | 36 | 36.x |
| redhat / advanced_cluster_management_for_kubernetes | 2.0 | 2.0.x |
golang.org/x/crypto
|
- | 0.0.0-20220314234659-1baeb1ce4c0b |