CVE-2022-27191
CVE Details
Visit the official vulnerability details page for CVE-2022-27191 to learn more.
Initial Publication
11/13/2024
Last Update
12/13/2024
Third Party Dependency
golang.org/x/crypto
NIST CVE Summary
The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.
CVE Severity
Our Official Summary
This vulnerability is a false positive. Although this is reported by the scanning tools on some of the components, further checks indicate the symbol/function with the vulnerability while present is not being used.
Status
Ongoing
Affected Products & Versions
This CVE is non-impacting as the impacting symbol and/or function is not used in the product
Revision History
Date | Revision |
---|