VDB
DEBIAN-CVE-2025-47914
DEBIAN-CVE-2025-47914
PUBLISHED
CVSS 5.300000190734863 MEDIUM
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Risk Scores
CVSS v3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:12 | golang-go.crypto | 1:0.41.0-1~exp1, 1:0.42.0-1~exp1, 1:0.42.0-3 |
| Debian:11 | golang-go.crypto | 0.42.0-1, 0.42.0-2, 0.42.0-3 |
| Debian:14 | golang-go.crypto | 0, 1:0.25.0-1, 1:0.33.0-1~exp1 |
| Debian:13 | golang-go.crypto | 0.42.0-4, 0.43.0-1, 0.43.0-2 |
Timeline
- Nov 19, 2025 CVE Published
- Apr 28, 2026 CVE Updated