PT-2020-20570 · Go · Golang.Org/X/Crypto

Published 2020-02-20 · Updated 2023-06-17 · CVE-2020-9283

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions golang.org/x/crypto versions prior to v0.0.0-20200220183623-bac4c82f6975

Description The issue allows a panic during signature verification in the golang.org/x/crypto/ssh package. This can be exploited by a client to attack an SSH server that accepts public keys, or by a server to attack any SSH client. An attacker can craft specific public keys, such as ssh-ed25519 or [e-mail], to cause the library to panic when verifying a signature, potentially leading to a denial of service.

Recommendations For versions prior to v0.0.0-20200220183623-bac4c82f6975, update to v0.0.0-20200220183623-bac4c82f6975 or later to resolve the issue. As a temporary workaround, consider restricting the use of user-supplied public keys for signature verification to minimize the risk of exploitation.

Exploit

Fix

Improper Verification of Cryptographic Signature

Weakness Enumeration

CWE-347

Related Identifiers

CVE-2020-9283

DLA-2402-1

DLA-2453-1

DLA-2455-1

DLA-3455-1

GHSA-FFHG-7MH4-33C4

GO-2020-0012

RHSA-2020:2413

RHSA-2020:3369

Affected Products

Golang.Org/X/Crypto

References · 36

• 🔥 https://github.com/brompwnie/CVE-2020-9283 · Exploit
• 🔥 https://github.com/mark-adams/exploits · Exploit
• 🔥 https://exploit-db.com/exploits/48121 · Exploit
• 🔥 http://packetstormsecurity.com/files/156480/Go-SSH-0.0.2-Denial-Of-Service.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-9283 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9283 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2020-0012 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2020-9283 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-9283 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-ffhg-7mh4-33c4 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2453-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-9283 · Security Note
• https://osv.dev/vulnerability/DLA-2455-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3455-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-9283 · Vendor Advisory