-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
GoGoMiggo AIRoot Cause AnalysisThe vulnerability occurs in the authentication handling path where the server processes 'gssapi-with-mic' requests. The patch adds a guard condition in the server authentication flow to exclude this method when GSSAPIWithMICConfig is nil. The function responsible for authentication (serverAuthenticate() method of serverConn) would panic when processing this method without the nil check, as it would attempt to dereference the nil config.php. The function name is derived from the SSH package structure and the location of the security check addition in the patch.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| golang.org/x/crypto | go | < 0.0.0-20201216223049-8b5274cf687f | 0.0.0-20201216223049-8b5274cf687f |
Ongoing coverage of React2Shell