CVE-2021-43565

Aliases:GHSA-gwc9-m7rh-j2wwGO-2022-0968DEBIAN-CVE-2021-43565CGA-2m5w-65rv-2q59CGA-2pqm-hhvr-cq53CGA-3q37-76jc-hx8vCGA-3rm5-jv7x-8gv4CGA-4rvh-v8gm-8j74CGA-5jrw-2p4h-rjgqCGA-73xw-9q9q-2p5cCGA-784j-9g65-6hrxCGA-8pq7-w27r-g75wCGA-9h6m-q7m9-qwm3CGA-9m7r-gc8m-mc6qCGA-9qqq-f4q2-p2c3CGA-cjcv-8wr4-326pCGA-crxm-pgqf-wxwrCGA-f9rf-x8x4-qx3rCGA-fm78-p62c-7fv3CGA-gjmx-vqfj-7h6jCGA-gm8g-774m-pc88CGA-h47f-p9qf-vj57CGA-hgm7-frff-9m8gCGA-jq87-gpc2-ff2pCGA-m6pv-8q85-4hpgCGA-p59g-458c-87h4CGA-pf3x-x4f9-v5hwCGA-3f84-vgxv-9mwmCGA-3w2m-82gq-7fp7CGA-4686-2rpq-8c4cCGA-4hm4-j377-vr9pCGA-4qf7-36wh-rpc4CGA-4x28-7r78-w3ccCGA-5ccj-r376-7r5pCGA-5vr6-qq4w-xh29CGA-6799-mq6v-mg99CGA-7627-q84w-qmhvCGA-76jp-9qm5-gfx7CGA-94cv-g2gp-ghvmCGA-9fwx-3848-c274CGA-9hmx-8pxr-xffpCGA-fpf7-5r3q-j4pmCGA-fw2c-w6gp-gcrmCGA-g8jp-7rp4-gv5qCGA-gcrv-mq8g-7vpmCGA-ghq8-xrpf-c865CGA-h54c-q7xm-72hfCGA-hjhx-9j9m-933mCGA-jh88-px74-m732CGA-mf9j-9h58-v5m3CGA-p97v-jjr9-gg2rCGA-p9f3-v6fh-4vmpCGA-q8c4-qxp3-j932CGA-qj7r-2xpm-455rCGA-qjmr-83hp-7q5xCGA-qphv-rq7w-38hmCGA-qr38-xqjh-hx3rCGA-qwj7-wvxh-r33wCGA-r3p2-9qmr-pgq4CGA-r7qq-qf85-ghq6CGA-r8c5-frcm-vpphCGA-r9v6-vg98-485wCGA-rc4w-c3jp-45hfCGA-rf6c-whwf-jp8mCGA-rp29-rr9r-vvjmCGA-rrf7-xrhm-qpwvCGA-v2f5-655w-84hcCGA-v9w6-vmh7-cwhjCGA-w3hq-j2vh-4g77CGA-w3q3-r55j-qx2fCGA-wp8q-724q-hxq7CGA-xgmh-c3c5-qrw4CGA-xqf3-wffh-g9xg
Advisory lineage Upstream: 0 Downstream: 19
Modified
Published: 06 Sept 2022, 17:03
Last modified:04 Aug 2024, 04:03

Vulnerability Summary

Overall Risk (default)
medium
30/100
CVSS Score
7.5 HIGH
v3.1 (nvd)
EPSS Score
1.12% LOW
1% probability +1.09%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

06 Sept 2022, 17:03
Published
Vulnerability first disclosed
04 Aug 2024, 04:03
Last Modified
Vulnerability information updated

Description

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 1.12%• Percentile: 65%

Affected Systems

  • chainguard•dex-k8s-authenticator

    < 0

  • chainguard•dynamic-localpv-provisioner

    < 3.4.1-r3

  • chainguard•dynamic-localpv-provisioner-fips

    < 3.5.0-r0

  • chainguard•k3d

    < 5.6.0-r11

  • chainguard•k3d-proxy

    < 5.6.0-r11

  • chainguard•k3d-tools

    < 5.6.0-r11

  • chainguard•kubeflow

    < 1.10.0-r4

  • chainguard•kubeflow-access-management

    < 1.10.0-r4

  • chainguard•kubeflow-access-management-compat

    < 1.10.0-r4

  • chainguard•kubeflow-access-management-fips

    < 1.10.0-r2

  • chainguard•kubeflow-access-management-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-admission-webhook

    < 1.10.0-r4

  • chainguard•kubeflow-admission-webhook-compat

    < 1.10.0-r4

  • chainguard•kubeflow-admission-webhook-fips

    < 1.10.0-r2

  • chainguard•kubeflow-admission-webhook-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-fips

    < 1.10.0-r2

  • chainguard•kubeflow-notebook-controller

    < 1.10.0-r4

  • chainguard•kubeflow-notebook-controller-compat

    < 1.10.0-r4

  • chainguard•kubeflow-notebook-controller-fips

    < 1.10.0-r2

  • chainguard•kubeflow-notebook-controller-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-profile-controller

    < 1.10.0-r4

  • chainguard•kubeflow-profile-controller-compat

    < 1.10.0-r4

  • chainguard•kubeflow-profile-controller-fips

    < 1.10.0-r2

  • chainguard•kubeflow-profile-controller-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-pvcviewer-controller

    < 1.10.0-r4

  • chainguard•kubeflow-pvcviewer-controller-compat

    < 1.10.0-r4

  • chainguard•kubeflow-pvcviewer-controller-fips

    < 1.10.0-r2

  • chainguard•kubeflow-pvcviewer-controller-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-tensorboard-controller

    < 1.10.0-r4

  • chainguard•kubeflow-tensorboard-controller-compat

    < 1.10.0-r4

  • chainguard•kubeflow-tensorboard-controller-fips

    < 1.10.0-r2

  • chainguard•kubeflow-tensorboard-controller-fips-compat

    < 1.10.0-r2

  • chainguard•prometheus-postgres-exporter-0.10

    < 0

  • chainguard•terraform-provider-sendgrid

    < 1.0.1-r1

  • chainguard•terraform-provider-sendgrid-fips

    < 1.0.1-r1

  • wolfi•dynamic-localpv-provisioner

    < 3.4.1-r3

  • wolfi•k3d

    < 5.6.0-r11

  • wolfi•k3d-proxy

    < 5.6.0-r11

  • wolfi•k3d-tools

    < 5.6.0-r11

  • wolfi•kubeflow

    < 1.10.0-r4

  • wolfi•kubeflow-access-management

    < 1.10.0-r4

  • wolfi•kubeflow-access-management-compat

    < 1.10.0-r4

  • wolfi•kubeflow-admission-webhook

    < 1.10.0-r4

  • wolfi•kubeflow-admission-webhook-compat

    < 1.10.0-r4

  • wolfi•kubeflow-notebook-controller

    < 1.10.0-r4

  • wolfi•kubeflow-notebook-controller-compat

    < 1.10.0-r4

  • wolfi•kubeflow-profile-controller

    < 1.10.0-r4

  • wolfi•kubeflow-profile-controller-compat

    < 1.10.0-r4

  • wolfi•kubeflow-pvcviewer-controller

    < 1.10.0-r4

  • wolfi•kubeflow-pvcviewer-controller-compat

    < 1.10.0-r4

Showing first 50 affected entries in server-rendered view.

References (9)