VDB
RHSA-2025%3A0645
RHSA-2025%3A0645
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel8@sha256:c57a882642f3f805329967d94e6ba6af2738b29820480576fbbc79c6e5fb6d33_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-secrets-store-csi-driver-rhel8@sha256:c57a882642f3f805329967d94e6ba6af2738b29820480576fbbc79c6e5fb6d33_ppc64le |
| Red Hat | openshift4/ose-ptp-rhel9-operator@sha256:0349a965e3a6b5d8ca677f8d0e6756e2b24ec7369a67d4ffd19a69cd129f34ab_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ptp-rhel9-operator@sha256:0349a965e3a6b5d8ca677f8d0e6756e2b24ec7369a67d4ffd19a69cd129f34ab_arm64 |
| Red Hat | openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:10913b01b18b4d765a26e76c2631a4a8e7b5d36285a7bc29a6f85c9a89ac2280_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, openshift4/ose-aws-efs-csi-driver-container-rhel8@sha256:10913b01b18b4d765a26e76c2631a4a8e7b5d36285a7bc29a6f85c9a89ac2280_amd64, * |
| Red Hat | openshift4/ose-cloud-event-proxy-rhel9@sha256:0f3264a3e78af9b51b8d66694e793082fef728c2382a581a8007538318e0d210_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, openshift4/ose-cloud-event-proxy-rhel9@sha256:0f3264a3e78af9b51b8d66694e793082fef728c2382a581a8007538318e0d210_arm64 |
| Red Hat | openshift4/ose-ptp-rhel9@sha256:b9db82e50b3d0caf88e3fb48152fb4569b6ebb2042293e0b975e17d988f2d95d_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ptp-rhel9@sha256:b9db82e50b3d0caf88e3fb48152fb4569b6ebb2042293e0b975e17d988f2d95d_arm64 |
| Red Hat | openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:3bfebc15dee07e9b9b898e09087d74ddffd67456b59d25ba19ac4059490dedbd_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-aws-efs-csi-driver-rhel8-operator@sha256:3bfebc15dee07e9b9b898e09087d74ddffd67456b59d25ba19ac4059490dedbd_amd64, *, * |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel8-operator@sha256:4b8224d9bd504801e175c326fff8f1ed7dfb5ada276f4158c9dde1acb1465d30_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-secrets-store-csi-driver-rhel8-operator@sha256:4b8224d9bd504801e175c326fff8f1ed7dfb5ada276f4158c9dde1acb1465d30_ppc64le |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel8@sha256:8b18a530303b0abd2c67161a237bfd4080e280d7549ff761eb4dd3ee84489b2a_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-secrets-store-csi-driver-rhel8@sha256:8b18a530303b0abd2c67161a237bfd4080e280d7549ff761eb4dd3ee84489b2a_amd64, *, * |
| Red Hat | openshift4/ose-helm-operator@sha256:90d2a9a3868aef0db1838f4ce1585c7c1a5f04c0e266876ba39a052ff90a0a4b_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-cluster-capacity@sha256:fc79ee59245e0aecf79f2d2cfac195621569763fcd896a4e6288b840a59f1a96_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/ose-egress-dns-proxy@sha256:4d46d799d7a39691f47b773e1e0c01f36e7883a6625baf48ef8de1f209f128a2_s390x as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-egress-dns-proxy@sha256:4d46d799d7a39691f47b773e1e0c01f36e7883a6625baf48ef8de1f209f128a2_s390x |
| Red Hat | openshift4/ose-egress-router@sha256:203d0097a1ba10d6582af51bc22a8dba71f27f7c3244177057ed61d354cddaa0_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-egress-router@sha256:203d0097a1ba10d6582af51bc22a8dba71f27f7c3244177057ed61d354cddaa0_ppc64le |
| Red Hat | openshift4/ose-secrets-store-csi-driver-rhel8@sha256:fd6e27beb9c1911b85f7d0bcef0626286d914c184fe09916288e92688fcc9c1a_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/ose-ptp-rhel9-operator@sha256:e621cafc22e69c9998e4b87414a354fbb3f11a583d5d1de1ef153893bf629af3_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-ptp-rhel9-operator@sha256:e621cafc22e69c9998e4b87414a354fbb3f11a583d5d1de1ef153893bf629af3_ppc64le, *, * |
| Red Hat | openshift4/nmstate-console-plugin-rhel8@sha256:51769a4ea8e980c99a20865cd238ce1f25c811ab6c38cd04acee50b09853913d_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/nmstate-console-plugin-rhel8@sha256:51769a4ea8e980c99a20865cd238ce1f25c811ab6c38cd04acee50b09853913d_amd64 |
| Red Hat | openshift4/ose-egress-router@sha256:e1dfdc2b45b7d1176e339891d897106f8f8a2babd8a58cdd907203a2de8bf40b_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/ose-egress-dns-proxy@sha256:33ccf58bbee847f3014333f8f2e1aa0c7c774548681b9eba87ee52ad62f30c1a_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | openshift4/ose-egress-dns-proxy@sha256:33ccf58bbee847f3014333f8f2e1aa0c7c774548681b9eba87ee52ad62f30c1a_arm64, *, * |
| Red Hat | openshift4/ose-operator-sdk-rhel8@sha256:130e9c6ed4fe399c12fda4ef2d4e78d9fbba2acb1c8e8eef85d241bb98904f7c_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
| Red Hat | openshift4/nmstate-console-plugin-rhel8@sha256:142cfdcba3d864812701022add7ca36a6a4c8ffa4fc9479c90b6e209d97210ba_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | openshift4/ingress-node-firewall-rhel9-operator@sha256:7115e11135132d92dce5f03daaffa24c42b6bccc08a9f093f569045c2abdd59e_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | * |
…and 188 more
Timeline
- Jan 29, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jul 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:0645 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2331720 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2333122 issue
- https://issues.redhat.com/browse/OCPBUGS-47650 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_0645.json advisory
- https://access.redhat.com/security/cve/CVE-2024-45337 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-45337 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45337 advisory
- https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909 advisory
- https://go.dev/cl/635315 advisory
- https://go.dev/issue/70779 advisory
- https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ advisory
- https://pkg.go.dev/vuln/GO-2024-3321 advisory
- https://access.redhat.com/security/cve/CVE-2024-45338 advisory
- https://www.cve.org/CVERecord?id=CVE-2024-45338 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45338 advisory
- https://go.dev/cl/637536 advisory
- https://go.dev/issue/70906 advisory
- https://groups.google.com/g/golang-announce/c/wSCRmFnNmPA/m/Lvcd0mRMAwAJ advisory
…and 1 more