Closed mend-bolt-for-github[bot] closed 3 years ago
[mirror] Go supplementary cryptography libraries
Dependency Hierarchy: - github.com/homeport/dyff-v0.9.0 (Root Library) - github.com/gonvenience/term-v1.0.0 - :x: **github.com/golang/crypto-06a226fb4e3765ef3f48aa2852b401bc7b98e981** (Vulnerable Library)
Found in HEAD commit: 3ad3fc12dc1fbb1d1917f3fc53146d54a3484b59
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.
Publish Date: 2020-12-17
URL: CVE-2020-29652
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
Type: Upgrade version
Origin: https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1
Release Date: 2020-12-17
Fix Resolution: v0.0.0-20201216223049-8b5274cf687f
Step up your Open Source Security Game with WhiteSource here
CVE-2020-29652 - High Severity Vulnerability
[mirror] Go supplementary cryptography libraries
Dependency Hierarchy: - github.com/homeport/dyff-v0.9.0 (Root Library) - github.com/gonvenience/term-v1.0.0 - :x: **github.com/golang/crypto-06a226fb4e3765ef3f48aa2852b401bc7b98e981** (Vulnerable Library)
Found in HEAD commit: 3ad3fc12dc1fbb1d1917f3fc53146d54a3484b59
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.
Publish Date: 2020-12-17
URL: CVE-2020-29652
Base Score Metrics: - Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Unchanged - Impact Metrics: - Confidentiality Impact: None - Integrity Impact: None - Availability Impact: High
For more information on CVSS3 Scores, click here.Type: Upgrade version
Origin: https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1
Release Date: 2020-12-17
Fix Resolution: v0.0.0-20201216223049-8b5274cf687f
Step up your Open Source Security Game with WhiteSource here