CVE catalog

CVE-2022-27191

golang-go.crypto: CVE-2022-27191

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
3.93% · Oct 25, 2026

The golang.org/x/crypto/ssh package before 0.0.0-20220314234659-1baeb1ce4c0b for Go allows an attacker to crash a server in certain circumstances involving AddHostKey.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiangolang-go.cryptosid1:0.58.0-1fixed
Debiangolang-go.cryptoforky1:0.58.0-1fixed
Debiangolang-go.cryptotrixie1:0.25.0-1fixed
Debiangolang-go.cryptobookworm1:0.4.0-1fixed
Gogolang.org/x/cryptoNot reported0.0.0-20220314234659-1baeb1ce4c0bfixed
Gogolang.org/x/cryptoNot reported0.0.0-20220314234659-1baeb1ce4c0bfixed
Susegolang-github-prometheus-node_exportermanager client tools for rhel, liberty and clones 9-client-tools1.5.0-1.6.1fixed
Suseprometheus-postgres_exportermanager client tools for rhel, liberty and clones 9-client-tools0.10.1-1.6.2fixed
Opensusecontainerdtumbleweed1.6.9-1.1fixed
Susegolang-github-prometheus-alertmanagermanager client tools 150.23.0-150100.4.13.2fixed
Susegolang-github-prometheus-node_exportermanager client tools for sle micro 51.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise module for basesystem 15 sp41.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-alertmanagermanager proxy module 4.20.23.0-150100.4.13.2fixed
Susegolang-github-prometheus-alertmanagermanager proxy module 4.30.23.0-150100.4.13.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise high performance computing 15 sp1-ltss1.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise high performance computing 15 sp2-ltss1.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise high performance computing 15 sp3-espos1.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise high performance computing 15 sp3-ltss1.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise real time 15 sp31.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server 15 sp1-ltss1.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server 15 sp2-ltss1.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server 15 sp3-ltss1.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server for sap applications 15 sp11.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server for sap applications 15 sp21.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server for sap applications 15 sp31.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exportermanager proxy 4.21.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exportermanager server 4.21.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterenterprise storage 71.5.0-150100.3.23.2fixed
Susegolang-github-prometheus-node_exporterenterprise storage 7.11.5.0-150100.3.23.2fixed
Opensusegolang-github-prometheus-alertmanagerleap 15.40.23.0-150100.4.13.2fixed
Opensusegolang-github-prometheus-node_exporterleap 15.41.5.0-150100.3.23.2fixed
Opensusegolang-github-prometheus-node_exportertumbleweed1.5.0-1.1fixed
Susegolang-github-prometheus-node_exporteropenstack cloud 91.5.0-1.24.4fixed
Susegolang-github-prometheus-node_exporteropenstack cloud crowbar 91.5.0-1.24.4fixed
Susegolang-github-prometheus-alertmanagermanager client tools 120.23.0-1.18.3fixed
Susegolang-github-prometheus-node_exportermanager client tools 121.5.0-1.24.4fixed
Susegolang-github-prometheus-prometheusmanager client tools 122.37.6-1.44.3fixed
Susegolang-github-prometheus-promumanager client tools 120.14.0-1.12.1fixed
Suseprometheus-blackbox_exportermanager client tools 120.19.0-1.17.1fixed
Suseprometheus-postgres_exportermanager client tools 120.10.1-1.11.5fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server for sap applications 12 sp41.5.0-1.24.4fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server 12 sp4-espos1.5.0-1.24.4fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server 12 sp4-ltss1.5.0-1.24.4fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server 12 sp51.5.0-1.24.4fixed
Susegolang-github-prometheus-node_exporterlinux enterprise server for sap applications 12 sp51.5.0-1.24.4fixed
Susecorednspackage hub 15 sp61.11.3-bp156.4.3.1fixed
Opensusecorednsleap 15.61.11.3-bp156.4.3.1fixed
Opensusecorednstumbleweed1.10.0-1.1fixed
Opensusevelerotumbleweed1.11.1-1.1fixed
Susegolang-github-prometheus-node_exporterel-91.5.0-1.6.1fixed
Susegolang-packagingel-915.0.16-1.3.2fixed
Suseprometheus-postgres_exporterel-90.10.1-1.6.2fixed
Susegolang-github-prometheus-node_exportermanager client tools for rhel, liberty and clones 9-client-tools1.5.0-1.6.1fixed
Suseprometheus-postgres_exportermanager client tools for rhel, liberty and clones 9-client-tools0.10.1-1.6.2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiangolang-go.cryptosourcesid1:0.0~git20220315.3147a52-1not yet assignedNot reportedNot reported
Debiangolang-go.cryptosourceforky1:0.0~git20220315.3147a52-1not yet assignedNot reportedNot reported
Debiangolang-go.cryptosourcetrixie1:0.0~git20220315.3147a52-1not yet assignedNot reportedNot reported
Debiangolang-go.cryptosourcebookworm1:0.0~git20220315.3147a52-1not yet assignedNot reportedNot reported
Gogolang.org/x/cryptoGoNot reported0.0.0-20220314234659-1baeb1ce4c0bNot reportedGHSA-8C26-WMH5-6G9VNot reported
Gogolang.org/x/cryptoGoNot reported0.0.0-20220314234659-1baeb1ce4c0bNot reportedGO-2021-0356Not reported
Susegolang-github-prometheus-node_exporterrpmmanager client tools for rhel, liberty and clones 9-client-tools1.5.0-1.6.1Not reportedSUSE-EL-9-CLIENT-TOOLS-2023-2185Not reported
Suseprometheus-postgres_exporterrpmmanager client tools for rhel, liberty and clones 9-client-tools0.10.1-1.6.2Not reportedSUSE-EL-9-CLIENT-TOOLS-2023-2185Not reported
Opensusecontainerdrpmtumbleweed1.6.9-1.1Not reportedOPENSUSE-SU-2024:12550-1Not reported
Susegolang-github-prometheus-alertmanagerrpmmanager client tools 150.23.0-150100.4.13.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmmanager client tools for sle micro 51.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise module for basesystem 15 sp41.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-alertmanagerrpmmanager proxy module 4.20.23.0-150100.4.13.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-alertmanagerrpmmanager proxy module 4.30.23.0-150100.4.13.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise high performance computing 15 sp1-ltss1.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise high performance computing 15 sp2-ltss1.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise high performance computing 15 sp3-espos1.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise high performance computing 15 sp3-ltss1.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise real time 15 sp31.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server 15 sp1-ltss1.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server 15 sp2-ltss1.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server 15 sp3-ltss1.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server for sap applications 15 sp11.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server for sap applications 15 sp21.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server for sap applications 15 sp31.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmmanager proxy 4.21.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmmanager server 4.21.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmenterprise storage 71.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Susegolang-github-prometheus-node_exporterrpmenterprise storage 7.11.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Opensusegolang-github-prometheus-alertmanagerrpmleap 15.40.23.0-150100.4.13.2Not reportedSUSE-SU-2023:2187-1Not reported
Opensusegolang-github-prometheus-node_exporterrpmleap 15.41.5.0-150100.3.23.2Not reportedSUSE-SU-2023:2187-1Not reported
Opensusegolang-github-prometheus-node_exporterrpmtumbleweed1.5.0-1.1Not reportedOPENSUSE-SU-2024:12637-1Not reported
Susegolang-github-prometheus-node_exporterrpmopenstack cloud 91.5.0-1.24.4Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-node_exporterrpmopenstack cloud crowbar 91.5.0-1.24.4Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-alertmanagerrpmmanager client tools 120.23.0-1.18.3Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-node_exporterrpmmanager client tools 121.5.0-1.24.4Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-prometheusrpmmanager client tools 122.37.6-1.44.3Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-promurpmmanager client tools 120.14.0-1.12.1Not reportedSUSE-SU-2023:2183-1Not reported
Suseprometheus-blackbox_exporterrpmmanager client tools 120.19.0-1.17.1Not reportedSUSE-SU-2023:2183-1Not reported
Suseprometheus-postgres_exporterrpmmanager client tools 120.10.1-1.11.5Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server for sap applications 12 sp41.5.0-1.24.4Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server 12 sp4-espos1.5.0-1.24.4Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server 12 sp4-ltss1.5.0-1.24.4Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server 12 sp51.5.0-1.24.4Not reportedSUSE-SU-2023:2183-1Not reported
Susegolang-github-prometheus-node_exporterrpmlinux enterprise server for sap applications 12 sp51.5.0-1.24.4Not reportedSUSE-SU-2023:2183-1Not reported
Susecorednsrpmpackage hub 15 sp61.11.3-bp156.4.3.1Not reportedOPENSUSE-SU-2024:0319-1Not reported
Opensusecorednsrpmleap 15.61.11.3-bp156.4.3.1Not reportedOPENSUSE-SU-2024:0319-1Not reported
Opensusecorednsrpmtumbleweed1.10.0-1.1Not reportedOPENSUSE-SU-2024:12490-1Not reported
Opensusevelerorpmtumbleweed1.11.1-1.1Not reportedOPENSUSE-SU-2024:13225-1Not reported
Susegolang-github-prometheus-node_exporterrpmel-91.5.0-1.6.1Not reportedSUSE-SU-2023:2185-1Not reported
Susegolang-packagingrpmel-915.0.16-1.3.2Not reportedSUSE-SU-2023:2185-1Not reported
Suseprometheus-postgres_exporterrpmel-90.10.1-1.6.2Not reportedSUSE-SU-2023:2185-1Not reported
Susegolang-github-prometheus-node_exporterrpmmanager client tools for rhel, liberty and clones 9-client-tools1.5.0-1.6.1Not reportedSUSE-SU-2023:2185-1Not reported
Suseprometheus-postgres_exporterrpmmanager client tools for rhel, liberty and clones 9-client-tools0.10.1-1.6.2Not reportedSUSE-SU-2023:2185-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [golang-golang-x-crypto-dev]Unknown

    Source package: [golang-go.crypto]

    Details (4)

    • 1:0.4.0-1 · all · bookworm

      Fixed · Fixed: 1:0.0~git20220315.3147a52-1

      dsa · golang-go.crypto · debian · bookworm

    • 1:0.4.0-1 · all · bookworm

      Fixed · Fixed: 1:0.0~git20220315.3147a52-1

      dsa · golang-go.crypto · debian · bookworm

    • 1:0.25.0-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:0.0~git20220315.3147a52-1

      dsa · golang-go.crypto · debian · bookworm

    • 1:0.25.0-1~bpo12+1 · all · bookworm-backports

      Fixed · Fixed: 1:0.0~git20220315.3147a52-1

      dsa · golang-go.crypto · debian · bookworm

[openSUSE Tumbleweed]

  • [containerd]Unknown

    Source package: [containerd]

    Details (1)

    • 1.7.33-1.3 · x86_64 · tumbleweed

      Fixed · Fixed: 1.6.9-1.1

      dsa · containerd · opensuse · tumbleweed

  • [containerd-ctr]Unknown

    Source package: [containerd]

    Details (1)

    • 1.7.33-1.3 · x86_64 · tumbleweed

      Unknown · Fixed: 1.6.9-1.1

      Version impact unknown

      dsa · containerd · opensuse · tumbleweed

  • [containerd-devel]Unknown

    Source package: [containerd]

    Details (1)

    • 1.7.33-1.3 · noarch · tumbleweed

      Unknown · Fixed: 1.6.9-1.1

      Version impact unknown

      dsa · containerd · opensuse · tumbleweed

  • [coredns]Unknown

    Source package: [coredns]

    Details (1)

    • 1.14.7-2.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.10.0-1.1

      dsa · coredns · opensuse · tumbleweed

  • [coredns-extras]Unknown

    Source package: [coredns]

    Details (1)

    • 1.14.7-2.1 · noarch · tumbleweed

      Unknown · Fixed: 1.10.0-1.1

      Version impact unknown

      dsa · coredns · opensuse · tumbleweed

  • [golang-github-prometheus-node_exporter]Unknown

    Source package: [golang-github-prometheus-node_exporter]

    Details (1)

    • 1.12.1-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 1.5.0-1.1

      dsa · golang-github-prometheus-node_exporter · opensuse · tumbleweed

  • [velero]Unknown

    Source package: [velero]

    Details (1)

    • 1.18.2-1.3 · x86_64 · tumbleweed

      Fixed · Fixed: 1.11.1-1.1

      dsa · velero · opensuse · tumbleweed

  • [velero-bash-completion]Unknown

    Source package: [velero]

    Details (1)

    • 1.18.2-1.3 · noarch · tumbleweed

      Unknown · Fixed: 1.11.1-1.1

      Version impact unknown

      dsa · velero · opensuse · tumbleweed

  • [velero-fish-completion]Unknown

    Source package: [velero]

    Details (1)

    • 1.18.2-1.3 · noarch · tumbleweed

      Unknown · Fixed: 1.11.1-1.1

      Version impact unknown

      dsa · velero · opensuse · tumbleweed

  • [velero-zsh-completion]Unknown

    Source package: [velero]

    Details (1)

    • 1.18.2-1.3 · noarch · tumbleweed

      Unknown · Fixed: 1.11.1-1.1

      Version impact unknown

      dsa · velero · opensuse · tumbleweed

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]