VDB
RHSA-2025%3A16160
RHSA-2025%3A16160
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-pod-rhel9@sha256:52cae8703527393b148c57b6302bf785bca6b93e861ed940f2cd9431945020cf_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/ose-pod-rhel9@sha256:52cae8703527393b148c57b6302bf785bca6b93e861ed940f2cd9431945020cf_amd64, registry.redhat.io/openshift4/ose-pod-rhel9@sha256:52cae8703527393b148c57b6302bf785bca6b93e861ed940f2cd9431945020cf_amd64, registry.redhat.io/openshift4/ose-pod-rhel9@sha256:52cae8703527393b148c57b6302bf785bca6b93e861ed940f2cd9431945020cf_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni@sha256:12e04c64e77979c9e541550235e36b423cc186f6bd523fa6d9bba06d9f68aef5_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/ose-multus-cni@sha256:12e04c64e77979c9e541550235e36b423cc186f6bd523fa6d9bba06d9f68aef5_ppc64le, registry.redhat.io/openshift4/ose-multus-cni@sha256:12e04c64e77979c9e541550235e36b423cc186f6bd523fa6d9bba06d9f68aef5_ppc64le, registry.redhat.io/openshift4/ose-multus-cni@sha256:12e04c64e77979c9e541550235e36b423cc186f6bd523fa6d9bba06d9f68aef5_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel9@sha256:de2a1bd7bbb54565b8429f5d49c1622de3143773958197ad9730ae73f6e5f9f0_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel9@sha256:de2a1bd7bbb54565b8429f5d49c1622de3143773958197ad9730ae73f6e5f9f0_ppc64le, registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel9@sha256:de2a1bd7bbb54565b8429f5d49c1622de3143773958197ad9730ae73f6e5f9f0_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-prom-label-proxy@sha256:bdf108e70c20b065937ad312f38681c986a1ee251fc4a9b60bb2c7ef739eb3c3_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-telemeter-rhel9@sha256:cee2d6e2c4624011050b4ca8fe46af2029c11de74009e37d8c97a19decea8dae_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, registry.redhat.io/openshift4/ose-telemeter-rhel9@sha256:cee2d6e2c4624011050b4ca8fe46af2029c11de74009e37d8c97a19decea8dae_ppc64le, registry.redhat.io/openshift4/ose-telemeter-rhel9@sha256:cee2d6e2c4624011050b4ca8fe46af2029c11de74009e37d8c97a19decea8dae_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:16ce9e3da01f133bb4ba1e1532f4859a905071ae7656a9526023e99ba4fd3127_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/ose-cluster-kube-storage-version-migrator-rhel9-operator@sha256:16ce9e3da01f133bb4ba1e1532f4859a905071ae7656a9526023e99ba4fd3127_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-openshift-state-metrics-rhel9@sha256:2ec400aa7a2dd132db427b5a9da71d6a391a3ab02ca7b7326091aece015234d7_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel9@sha256:5918f65f625e013bbf7f35365e32785a856ceaca0e7566f57825b8ee5ac6eb60_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel9@sha256:5918f65f625e013bbf7f35365e32785a856ceaca0e7566f57825b8ee5ac6eb60_amd64, registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel9@sha256:5918f65f625e013bbf7f35365e32785a856ceaca0e7566f57825b8ee5ac6eb60_amd64, registry.redhat.io/openshift4/ose-vsphere-csi-driver-rhel9@sha256:5918f65f625e013bbf7f35365e32785a856ceaca0e7566f57825b8ee5ac6eb60_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-storage-rhel9-operator@sha256:9382e60bb6309a90aef9bed153432dcda752f0c8128a749968e3a7673dae4101_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, registry.redhat.io/openshift4/ose-cluster-storage-rhel9-operator@sha256:9382e60bb6309a90aef9bed153432dcda752f0c8128a749968e3a7673dae4101_ppc64le, registry.redhat.io/openshift4/ose-cluster-storage-rhel9-operator@sha256:9382e60bb6309a90aef9bed153432dcda752f0c8128a749968e3a7673dae4101_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-console@sha256:7b875edb5c78f712224006bda120f9ed967eab094eed46755aeda585c4446576_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/ose-console@sha256:7b875edb5c78f712224006bda120f9ed967eab094eed46755aeda585c4446576_amd64, registry.redhat.io/openshift4/ose-console@sha256:7b875edb5c78f712224006bda120f9ed967eab094eed46755aeda585c4446576_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel9@sha256:d32f4f726b9bc8321a4e8adc2ce8e6394872e668fe615f3faf31ebe6b9981d79_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, *, registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel9@sha256:d32f4f726b9bc8321a4e8adc2ce8e6394872e668fe615f3faf31ebe6b9981d79_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-olm-rukpak-rhel8@sha256:43c7f9a32905460104f6cfe064a95bb6379433199095a78b1389cac0dd4eee8c_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/ose-olm-rukpak-rhel8@sha256:43c7f9a32905460104f6cfe064a95bb6379433199095a78b1389cac0dd4eee8c_arm64, registry.redhat.io/openshift4/ose-olm-rukpak-rhel8@sha256:43c7f9a32905460104f6cfe064a95bb6379433199095a78b1389cac0dd4eee8c_arm64, * |
| Red Hat | registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:cc5d3518b012b98843585911eacdad88be8c69ba43bf24a7d8481a721f7a6f2b_amd64 as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:cc5d3518b012b98843585911eacdad88be8c69ba43bf24a7d8481a721f7a6f2b_amd64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-api-rhel9@sha256:1a50d7a4c492b8a9018da117d3ad1e70935c562f2c40f83c8a6e9e5d4a3b3424_s390x as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/ose-cluster-api-rhel9@sha256:1a50d7a4c492b8a9018da117d3ad1e70935c562f2c40f83c8a6e9e5d4a3b3424_s390x, registry.redhat.io/openshift4/ose-cluster-api-rhel9@sha256:1a50d7a4c492b8a9018da117d3ad1e70935c562f2c40f83c8a6e9e5d4a3b3424_s390x, registry.redhat.io/openshift4/ose-cluster-api-rhel9@sha256:1a50d7a4c492b8a9018da117d3ad1e70935c562f2c40f83c8a6e9e5d4a3b3424_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:ae9f538495d0c7d5505eee8c2110f9570c51d9087ecf90343bf1af0fe369bd8d_arm64 as a component of Red Hat OpenShift Container Platform 4.15 | *, registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:ae9f538495d0c7d5505eee8c2110f9570c51d9087ecf90343bf1af0fe369bd8d_arm64, registry.redhat.io/openshift4/ose-cluster-autoscaler-rhel9@sha256:ae9f538495d0c7d5505eee8c2110f9570c51d9087ecf90343bf1af0fe369bd8d_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-keepalived-ipfailover-rhel9@sha256:9ef87eced057ca60578f2cfee6e61a56988f8011c7dcbab7649be4c337515045_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:be9582d4002adf31bc4626a542b97a415f87017d311a520d43c078c29d8a0898_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/ose-cluster-control-plane-machine-set-rhel9-operator@sha256:be9582d4002adf31bc4626a542b97a415f87017d311a520d43c078c29d8a0898_ppc64le, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:d6435edf727ac96c2a7cbbfba3b6151efe6fbd76bfb5c24959bdea215c2ba329_ppc64le as a component of Red Hat OpenShift Container Platform 4.15 | *, registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:d6435edf727ac96c2a7cbbfba3b6151efe6fbd76bfb5c24959bdea215c2ba329_ppc64le, registry.redhat.io/openshift4/ose-cluster-openshift-controller-manager-rhel9-operator@sha256:d6435edf727ac96c2a7cbbfba3b6151efe6fbd76bfb5c24959bdea215c2ba329_ppc64le |
| Red Hat | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:737cebf7b00f0e2116f3baa9b6fc5d158e416404cab3eec773e210d8dc030b87_s390x as a component of Red Hat OpenShift Container Platform 4.15 | registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:737cebf7b00f0e2116f3baa9b6fc5d158e416404cab3eec773e210d8dc030b87_s390x, registry.redhat.io/openshift4/openshift-route-controller-manager-rhel8@sha256:737cebf7b00f0e2116f3baa9b6fc5d158e416404cab3eec773e210d8dc030b87_s390x, * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-snapshot-controller-rhel9@sha256:bdb803eeba73498d1a8ed24859c911b14f0e1345d6f5480c73b22ae1b2110aa7_s390x as a component of Red Hat OpenShift Container Platform 4.15 | *, *, registry.redhat.io/openshift4/ose-csi-snapshot-controller-rhel9@sha256:bdb803eeba73498d1a8ed24859c911b14f0e1345d6f5480c73b22ae1b2110aa7_s390x |
…and 1294 more
Timeline
- Sep 25, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:16160 advisory
- https://access.redhat.com/security/cve/CVE-2024-45337 advisory
- https://access.redhat.com/security/cve/CVE-2024-45339 advisory
- https://access.redhat.com/security/cve/CVE-2025-22869 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16160.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2331720 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45337 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45337 advisory
- https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909 advisory
- https://go.dev/cl/635315 advisory
- https://go.dev/issue/70779 advisory
- https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ advisory
- https://pkg.go.dev/vuln/GO-2024-3321 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2342463 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45339 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45339 advisory
- https://github.com/golang/glog/pull/74 advisory
- https://github.com/golang/glog/pull/74/commits/b8741656e406e66d6992bc2c9575e460ecaa0ec2 advisory
- https://groups.google.com/g/golang-announce/c/H-Q4ouHWyKs advisory
…and 8 more