CVE-2025-47913

Description

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

CVSS Metrics

• v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.62%• Percentile: 48%

Techniques & Countermeasures

• CWE-617•Reachable Assertion

  The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Affected Systems

• chainguard•apm-server-9.0

  < 0

• chainguard•apm-server-9.0-compat

  < 0

• chainguard•auditbeat-fips-8.17

  < 0

• chainguard•auditbeat-fips-8.18

  < 0

• chainguard•auditbeat-fips-9.0

  < 0

• chainguard•backup-restore-operator-7.0

  < 7.0.6-r1

• chainguard•backup-restore-operator-8.1

  < 8.1.4-r2

• chainguard•backup-restore-operator-9.0

  < 9.0.3-r4

• chainguard•backup-restore-operator-fips-8.1

  < 0

• chainguard•backup-restore-operator-fips-9.0

  < 0

• chainguard•beats-fips-8.17

  < 0

• chainguard•beats-fips-8.18

  < 0

• chainguard•beats-fips-9.0

  < 0

• chainguard•cert-manager-fips-1.17

  < 0

• chainguard•cert-manager-fips-1.19

  < 1.19.2-r0

• chainguard•cilium-fips-1.15

  < 0

• chainguard•cilium-fips-1.15-clustermesh-apiserver

  < 0

• chainguard•cilium-fips-1.15-container-init

  < 0

• chainguard•cilium-fips-1.15-container-init-compat

  < 0

• chainguard•cilium-fips-1.15-host-utils

  < 0

• chainguard•cilium-fips-1.15-hubble-relay

  < 0

• chainguard•cilium-fips-1.15-operator-aws

  < 0

• chainguard•cilium-fips-1.15-operator-azure

  < 0

• chainguard•cilium-fips-1.15-operator-generic

  < 0

• chainguard•cloud-provider-aws-1.28

  < 0

• chainguard•cloud-provider-aws-1.28-cloud-controller-manager

  < 0

• chainguard•cloud-provider-aws-1.28-ecr-credential-provider

  < 0

• chainguard•cloud-provider-aws-1.31

  < 0

• chainguard•cloud-provider-aws-1.31-cloud-controller-manager

  < 0

• chainguard•cloud-provider-aws-1.31-ecr-credential-provider

  < 0

• chainguard•cloud-provider-aws-fips-1.28

  < 0

• chainguard•cloud-provider-aws-fips-1.28-cloud-controller-manager

  < 0

• chainguard•cloud-provider-aws-fips-1.28-ecr-credential-provider

  < 0

• chainguard•consul-k8s-1.6

  < 1.6.10-r4

• chainguard•consul-k8s-1.6-cli

  < 1.6.10-r4

• chainguard•dex-k8s-authenticator

  < 0

• chainguard•dkron

  < 4.0.9-r0

• chainguard•dkron-compat

  < 4.0.9-r0

• chainguard•dkron-executor-gcppubsub

  < 4.0.9-r0

• chainguard•dkron-executor-gcppubsub-compat

  < 4.0.9-r0

• chainguard•dkron-executor-grpc

  < 4.0.9-r0

• chainguard•dkron-executor-grpc-compat

  < 4.0.9-r0

• chainguard•dkron-executor-kafka

  < 4.0.9-r0 | < 0

• chainguard•dkron-executor-kafka-compat

  < 4.0.9-r0

• chainguard•dkron-executor-nats

  < 0 | < 4.0.9-r0

• chainguard•dkron-executor-nats-compat

  < 4.0.9-r0

• chainguard•dkron-executor-rabbitmq

  < 4.0.9-r0

• chainguard•dkron-executor-rabbitmq-compat

  < 4.0.9-r0

• chainguard•dkron-fips

  < 4.0.8-r5

• chainguard•dkron-fips-compat

  < 4.0.8-r5

Showing first 50 affected entries in server-rendered view.

References (34)

• https://go.dev/cl/700295
• https://go.dev/issue/75178
• https://github.com/advisories/GHSA-56w8-48fp-6mgv
• https://pkg.go.dev/vuln/GO-2025-4116
• https://nvd.nist.gov/vuln/detail/CVE-2025-47913
• https://github.com/golang/crypto
• https://access.redhat.com/errata/RHSA-2026:0436
• https://access.redhat.com/security/updates/classification/#important
• https://bugzilla.redhat.com/show_bug.cgi?id=2414943
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0436.json
• https://access.redhat.com/security/cve/CVE-2025-47913
• https://www.cve.org/CVERecord?id=CVE-2025-47913
• https://github.com/advisories/GHSA-hcg3-q754-cr77
• https://access.redhat.com/errata/RHSA-2026:0437
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0437.json
• https://access.redhat.com/errata/RHSA-2026:0470
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0470.json
• https://access.redhat.com/errata/RHSA-2026:0545
• https://issues.redhat.com/browse/RHEL-138650
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0545.json
• https://access.redhat.com/errata/RHSA-2026:0753
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0753.json
• https://access.redhat.com/errata/RHSA-2026:16701
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16701.json
• https://access.redhat.com/errata/RHSA-2026:16702
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16702.json
• https://access.redhat.com/errata/RHSA-2026:5167
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5167.json
• https://access.redhat.com/errata/RHSA-2026:5222
• https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5222.json
• https://security-tracker.debian.org/tracker/CVE-2025-47913
• https://ubuntu.com/security/CVE-2025-47913
• https://go-review.googlesource.com/c/crypto/+/700295
• https://ubuntu.com/security/notices/USN-8519-1