cve.bz

CVE-2020-29652

7.5 highEPSS 3.2%

High (7.5) in golang ssh. EPSS 3.2% chance of exploitation in the next 30 days. Fixed in golang.org/x/crypto 0.0.0-20201216223049-8b5274cf687f.

A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
3.2% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-11-01)
CWE
CWE-476
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-3vm4-22fp-5rfmGogolang.org/x/crypto<0.0.0-20201216223049-8b5274cf687f0.0.0-20201216223049-8b5274cf687f
GO-2021-0227Gogolang.org/x/crypto<0.0.0-20201216223049-8b5274cf687f0.0.0-20201216223049-8b5274cf687f

References

Check your stackJSON