Executive brief
Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto
Affected products
- Go golang.org/x/crypto
Junglewise Threat Intelligence
CVE-2024-45337: GO-2024-3321 - Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto
CVE-2024-45337 · Severity: low · CVSS 3.1 · Published 2024-12-11
Technologies: golang.org/x/crypto (Go). Vendors: Go.
Related threats
- Go SSH deadlock vulnerability in channel handling
- Go x/crypto/ssh deadlock denial of service on undecided channel
- Go SSH source-address permission validation bypass in authentication callbacks
- GO-2026-5932 - The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues
- Go x/crypto denial of service in SSH agent Ed25519 parsing