Go/golang.org/x/crypto CVE-2020-29652: high 7.5, EPSS 3.18%
golang.org/x/crypto/ssh NULL Pointer Dereference vulnerability
Action: Upgrade golang.org/x/crypto to 0.0.0-20201216223049-8b5274cf687f or later.
go get golang.org/x/crypto@v0.0.0-20201216223049-8b5274cf687fAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
| 0.0.0-20201216223049-8b5274cf687f |
Sources
- osv: GHSA-3vm4-22fp-5rfm
- https://nvd.nist.gov/vuln/detail/CVE-2020-29652
- https://go-review.googlesource.com/c/crypto/+/278852
- https://go.dev/cl/278852
- https://go.googlesource.com/crypto/+/8b5274cf687fd9316b4108863654cc57385531e8
- https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1
- https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff@%3Cnotifications.skywalking.apache.org%3E
- https://pkg.go.dev/vuln/GO-2021-0227
CVE-2020-29652 · published · modified · JSON