CVE-2022-27191

Aliases:GHSA-8c26-wmh5-6g9vGO-2021-0356RHSA-2022:6527RHSA-2022:8932DEBIAN-CVE-2022-27191CGA-2485-w44r-3r5rCGA-2f29-j5wj-v8gqCGA-35pg-jw6h-3wgvCGA-3fmw-rmcj-jjr9CGA-4hg2-69m9-447mCGA-4q4j-gpvf-mpwmCGA-4q84-588x-c27mCGA-4qjp-2m2w-xmj2CGA-5jqq-w6px-c2f2CGA-5rwx-4gjw-h94pCGA-5w79-rp3m-hm38CGA-5xfj-7qw7-23gpCGA-6c99-2qgv-j9vfCGA-6p34-f82w-pm6vCGA-6wg5-xwm8-6mm9CGA-7pv7-vqhq-5592CGA-7qf7-m8wq-g2h3CGA-7x4f-wgw6-jm3qCGA-c8jr-vm3f-qrxfCGA-cfx6-99q8-9367CGA-f3wp-g6xh-pcf4CGA-fhh8-ff79-x4x2CGA-fwwc-c573-48c2CGA-g4gj-62wf-75jhCGA-h98f-93gf-ppq3CGA-hq3h-f487-83rhCGA-j2rq-39g4-m7p6CGA-jh9f-2fw6-76j8CGA-mvwp-xv92-pxf4CGA-27g5-452j-vcmqCGA-2jg3-xwmg-r68rCGA-4gcf-hg9p-87prCGA-4ppp-5x8h-x244CGA-7jh4-wp52-xv5gCGA-7vc5-w7qf-r5w5CGA-96r4-55x7-2xvvCGA-9vg6-g5vr-663wCGA-cj83-qf5p-qp8wCGA-cwmv-9x24-9wwwCGA-f3gq-5767-hxcvCGA-fwq4-f9f6-57cwCGA-fxxh-7fcr-32qgCGA-g297-4gqp-qm3jCGA-ggrf-prrj-99mhCGA-gqv2-rrhg-g89jCGA-gw24-wvhp-6553CGA-hm38-v9g4-x2vjCGA-j8ph-rh86-4jvmCGA-q3wg-gf9g-39cgCGA-q45f-3gp8-pvqjCGA-q7gj-hc46-r745CGA-qh2r-9wgr-4cm2CGA-qjjv-r6vp-fvg3CGA-qwvc-mhf2-3jqgCGA-rqpw-72fx-2ghpCGA-v6wh-cx44-cmcvCGA-vfp2-2gpx-gc48CGA-vhfg-49c5-f45cCGA-vpcj-3h9w-hw9jCGA-vqq5-w47x-3684CGA-w37g-2gpc-3w62CGA-w4g3-x7h7-8vwmCGA-w4rr-pcqv-x8jrCGA-w67v-6f8p-4x6mCGA-wqx7-jfx3-r488CGA-x2qh-5mx7-j7vmCGA-x449-ggmm-8w4mCGA-x85q-7j96-2cp4CGA-x9q3-85hq-c5rfCGA-xh8j-53wx-q6h8
Advisory lineage Upstream: 0 Downstream: 33
Modified
Published: 18 Mar 2022, 06:03
Last modified:03 Aug 2024, 05:25

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.5 HIGH
v3.1 (nvd)
EPSS Score
3.93% LOW
4% probability +3.84%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Mar 2022, 06:03
Published
Vulnerability first disclosed
03 Aug 2024, 05:25
Last Modified
Vulnerability information updated

Description

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

CVSS Metrics

  • v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • v2.0•MEDIUM•Score: 4.3AV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS Trends

Current EPSS score: 3.93%• Percentile: 90%

Affected Systems

  • chainguard•dex-k8s-authenticator

    < 0

  • chainguard•dynamic-localpv-provisioner

    < 3.4.1-r3

  • chainguard•dynamic-localpv-provisioner-fips

    < 3.5.0-r0

  • chainguard•k3d

    < 5.6.0-r11

  • chainguard•k3d-proxy

    < 5.6.0-r11

  • chainguard•k3d-tools

    < 5.6.0-r11

  • chainguard•kubeflow

    < 1.10.0-r4

  • chainguard•kubeflow-access-management

    < 1.10.0-r4

  • chainguard•kubeflow-access-management-compat

    < 1.10.0-r4

  • chainguard•kubeflow-access-management-fips

    < 1.10.0-r2

  • chainguard•kubeflow-access-management-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-admission-webhook

    < 1.10.0-r4

  • chainguard•kubeflow-admission-webhook-compat

    < 1.10.0-r4

  • chainguard•kubeflow-admission-webhook-fips

    < 1.10.0-r2

  • chainguard•kubeflow-admission-webhook-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-fips

    < 1.10.0-r2

  • chainguard•kubeflow-notebook-controller

    < 1.10.0-r4

  • chainguard•kubeflow-notebook-controller-compat

    < 1.10.0-r4

  • chainguard•kubeflow-notebook-controller-fips

    < 1.10.0-r2

  • chainguard•kubeflow-notebook-controller-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-profile-controller

    < 1.10.0-r4

  • chainguard•kubeflow-profile-controller-compat

    < 1.10.0-r4

  • chainguard•kubeflow-profile-controller-fips

    < 1.10.0-r2

  • chainguard•kubeflow-profile-controller-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-pvcviewer-controller

    < 1.10.0-r4

  • chainguard•kubeflow-pvcviewer-controller-compat

    < 1.10.0-r4

  • chainguard•kubeflow-pvcviewer-controller-fips

    < 1.10.0-r2

  • chainguard•kubeflow-pvcviewer-controller-fips-compat

    < 1.10.0-r2

  • chainguard•kubeflow-tensorboard-controller

    < 1.10.0-r4

  • chainguard•kubeflow-tensorboard-controller-compat

    < 1.10.0-r4

  • chainguard•kubeflow-tensorboard-controller-fips

    < 1.10.0-r2

  • chainguard•kubeflow-tensorboard-controller-fips-compat

    < 1.10.0-r2

  • chainguard•prometheus-postgres-exporter-0.10

    < 0

  • chainguard•terraform-provider-sendgrid

    < 1.0.1-r1

  • chainguard•terraform-provider-sendgrid-fips

    < 1.0.1-r1

  • wolfi•dynamic-localpv-provisioner

    < 3.4.1-r3

  • wolfi•k3d

    < 5.6.0-r11

  • wolfi•k3d-proxy

    < 5.6.0-r11

  • wolfi•k3d-tools

    < 5.6.0-r11

  • wolfi•kubeflow

    < 1.10.0-r4

  • wolfi•kubeflow-access-management

    < 1.10.0-r4

  • wolfi•kubeflow-access-management-compat

    < 1.10.0-r4

  • wolfi•kubeflow-admission-webhook

    < 1.10.0-r4

  • wolfi•kubeflow-admission-webhook-compat

    < 1.10.0-r4

  • wolfi•kubeflow-notebook-controller

    < 1.10.0-r4

  • wolfi•kubeflow-notebook-controller-compat

    < 1.10.0-r4

  • wolfi•kubeflow-profile-controller

    < 1.10.0-r4

  • wolfi•kubeflow-profile-controller-compat

    < 1.10.0-r4

  • wolfi•kubeflow-pvcviewer-controller

    < 1.10.0-r4

  • wolfi•kubeflow-pvcviewer-controller-compat

    < 1.10.0-r4

Showing first 50 affected entries in server-rendered view.

References (49)