VDB
RHSA-2025%3A16165
RHSA-2025%3A16165
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:9abb87f980bfd8cac366bf355e9938a77e39757e45a7bbca99223103067ea196_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:9abb87f980bfd8cac366bf355e9938a77e39757e45a7bbca99223103067ea196_ppc64le, registry.redhat.io/openshift4/ose-cluster-autoscaler-operator@sha256:9abb87f980bfd8cac366bf355e9938a77e39757e45a7bbca99223103067ea196_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:90b210d1b90c6380651785ff8046eadf9883cf32ec0eb50486463c519f591d8e_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:90b210d1b90c6380651785ff8046eadf9883cf32ec0eb50486463c519f591d8e_amd64, registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:90b210d1b90c6380651785ff8046eadf9883cf32ec0eb50486463c519f591d8e_amd64, registry.redhat.io/openshift4/ose-ovn-kubernetes-rhel9@sha256:90b210d1b90c6380651785ff8046eadf9883cf32ec0eb50486463c519f591d8e_amd64 |
| Red Hat | registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:b74117924b9de278053a257168f4819e2b9c6dc789e2e579e091adb8e574effa_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:b74117924b9de278053a257168f4819e2b9c6dc789e2e579e091adb8e574effa_arm64, *, registry.redhat.io/openshift4/oc-mirror-plugin-rhel8@sha256:b74117924b9de278053a257168f4819e2b9c6dc789e2e579e091adb8e574effa_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel8@sha256:659812d32c1c29e564250dcf1c6121a83fac9eda1d1cb5358e3584d212384cc0_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel8@sha256:659812d32c1c29e564250dcf1c6121a83fac9eda1d1cb5358e3584d212384cc0_ppc64le, registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel8@sha256:659812d32c1c29e564250dcf1c6121a83fac9eda1d1cb5358e3584d212384cc0_ppc64le, registry.redhat.io/openshift4/ose-machine-api-provider-gcp-rhel8@sha256:659812d32c1c29e564250dcf1c6121a83fac9eda1d1cb5358e3584d212384cc0_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-thanos-rhel8@sha256:6ffe7ba5a834ab60a3e58f2fe42f79e668d33c702f1fe860fa15d7f461f828f6_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-thanos-rhel8@sha256:6ffe7ba5a834ab60a3e58f2fe42f79e668d33c702f1fe860fa15d7f461f828f6_ppc64le, registry.redhat.io/openshift4/ose-thanos-rhel8@sha256:6ffe7ba5a834ab60a3e58f2fe42f79e668d33c702f1fe860fa15d7f461f828f6_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-olm-rukpak-rhel8@sha256:975eed4c6bb65da0f424925e06c967d7a0076abfb5dd836afc2f03877ddb7aa3_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-olm-rukpak-rhel8@sha256:975eed4c6bb65da0f424925e06c967d7a0076abfb5dd836afc2f03877ddb7aa3_amd64, registry.redhat.io/openshift4/ose-olm-rukpak-rhel8@sha256:975eed4c6bb65da0f424925e06c967d7a0076abfb5dd836afc2f03877ddb7aa3_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni@sha256:d48b9c07ce688f3399270d219b1f88997997e0dfb5204cc0b74e6214322e30aa_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-multus-cni@sha256:d48b9c07ce688f3399270d219b1f88997997e0dfb5204cc0b74e6214322e30aa_ppc64le, registry.redhat.io/openshift4/ose-multus-cni@sha256:d48b9c07ce688f3399270d219b1f88997997e0dfb5204cc0b74e6214322e30aa_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-kube-apiserver-operator@sha256:332491999cca8af49ecf9350b2b04d215ca7b37bd53f8adf1121a0982755f0f8_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-cluster-kube-apiserver-operator@sha256:332491999cca8af49ecf9350b2b04d215ca7b37bd53f8adf1121a0982755f0f8_arm64, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-proxy@sha256:fefa1f41f0138f463d4bfb59c77eae08bcec8c9a8e62b32628fffbf6a18af908_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-oauth-proxy@sha256:fefa1f41f0138f463d4bfb59c77eae08bcec8c9a8e62b32628fffbf6a18af908_ppc64le, *, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-autoscaler@sha256:3dfe7e9ac97405d1777016666da6426fb750b15f0875c61f3ea5662ff0a1ef06_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ose-cluster-autoscaler@sha256:3dfe7e9ac97405d1777016666da6426fb750b15f0875c61f3ea5662ff0a1ef06_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-autoscaler@sha256:ff19e23e84e1808aa54f681eca2bb97d429c44d25727ce843e7de50a42222695_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-cluster-autoscaler@sha256:ff19e23e84e1808aa54f681eca2bb97d429c44d25727ce843e7de50a42222695_arm64, registry.redhat.io/openshift4/ose-cluster-autoscaler@sha256:ff19e23e84e1808aa54f681eca2bb97d429c44d25727ce843e7de50a42222695_arm64, registry.redhat.io/openshift4/ose-cluster-autoscaler@sha256:ff19e23e84e1808aa54f681eca2bb97d429c44d25727ce843e7de50a42222695_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-openshift-apiserver-operator@sha256:4c0a5013df3f1718c9b52cfe51d841090fef90b8d74429c6ebf70f802bce96e3_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-cluster-openshift-apiserver-operator@sha256:4c0a5013df3f1718c9b52cfe51d841090fef90b8d74429c6ebf70f802bce96e3_amd64, *, registry.redhat.io/openshift4/ose-cluster-openshift-apiserver-operator@sha256:4c0a5013df3f1718c9b52cfe51d841090fef90b8d74429c6ebf70f802bce96e3_amd64 |
| Red Hat | registry.redhat.io/openshift4/network-tools-rhel8@sha256:1003dda623bcc1a75b6d126271b61c873da48ac39e73227232eb61243e5cceb9_s390x as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/network-tools-rhel8@sha256:1003dda623bcc1a75b6d126271b61c873da48ac39e73227232eb61243e5cceb9_s390x, registry.redhat.io/openshift4/network-tools-rhel8@sha256:1003dda623bcc1a75b6d126271b61c873da48ac39e73227232eb61243e5cceb9_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-oauth-server-rhel8@sha256:4935e679006bb3a9561db7e2fa87f654fe56b57eb6bea20439bad52088d9270c_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-oauth-server-rhel8@sha256:4935e679006bb3a9561db7e2fa87f654fe56b57eb6bea20439bad52088d9270c_ppc64le, registry.redhat.io/openshift4/ose-oauth-server-rhel8@sha256:4935e679006bb3a9561db7e2fa87f654fe56b57eb6bea20439bad52088d9270c_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-machine-approver@sha256:e02477eaac7a77fc4cafbdf312260fe8e9bb1e9938e1617d2428307dc420ad2e_s390x as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-cluster-machine-approver@sha256:e02477eaac7a77fc4cafbdf312260fe8e9bb1e9938e1617d2428307dc420ad2e_s390x, *, registry.redhat.io/openshift4/ose-cluster-machine-approver@sha256:e02477eaac7a77fc4cafbdf312260fe8e9bb1e9938e1617d2428307dc420ad2e_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-csi-livenessprobe@sha256:1c1b998d32b4b865f763f691e378e4305ee699f0c7a49d0f9d11b071c4b1d1d8_arm64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-csi-livenessprobe@sha256:1c1b998d32b4b865f763f691e378e4305ee699f0c7a49d0f9d11b071c4b1d1d8_arm64, *, registry.redhat.io/openshift4/ose-csi-livenessprobe@sha256:1c1b998d32b4b865f763f691e378e4305ee699f0c7a49d0f9d11b071c4b1d1d8_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-powervs-block-csi-driver-rhel8@sha256:cf02354bd73572f1b6490f602d29d3c21b9fad5a74f152913a366b3143072386_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ose-powervs-block-csi-driver-rhel8@sha256:cf02354bd73572f1b6490f602d29d3c21b9fad5a74f152913a366b3143072386_ppc64le, registry.redhat.io/openshift4/ose-powervs-block-csi-driver-rhel8@sha256:cf02354bd73572f1b6490f602d29d3c21b9fad5a74f152913a366b3143072386_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-hypershift-rhel8@sha256:7c446f3481e312215af918c28427433059ffa83162c9cda3eaea5e0e2dabee0e_ppc64le as a component of Red Hat OpenShift Container Platform 4.14 | *, registry.redhat.io/openshift4/ose-hypershift-rhel8@sha256:7c446f3481e312215af918c28427433059ffa83162c9cda3eaea5e0e2dabee0e_ppc64le, registry.redhat.io/openshift4/ose-hypershift-rhel8@sha256:7c446f3481e312215af918c28427433059ffa83162c9cda3eaea5e0e2dabee0e_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-csi-external-attacher@sha256:f7bed21d2c55f17728fb1922dc0a3ff82ce1e1b20b0c7d4a346612c6c406f5be_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | *, *, registry.redhat.io/openshift4/ose-csi-external-attacher@sha256:f7bed21d2c55f17728fb1922dc0a3ff82ce1e1b20b0c7d4a346612c6c406f5be_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:8112d8a9a76f4c1fc11c64c390b5f9aa15cb3a47884a6176c3064fd3f86cd754_amd64 as a component of Red Hat OpenShift Container Platform 4.14 | registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:8112d8a9a76f4c1fc11c64c390b5f9aa15cb3a47884a6176c3064fd3f86cd754_amd64, *, registry.redhat.io/openshift4/ose-ovirt-machine-controllers-rhel8@sha256:8112d8a9a76f4c1fc11c64c390b5f9aa15cb3a47884a6176c3064fd3f86cd754_amd64 |
…and 1323 more
Timeline
- Sep 25, 2025 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:16165 advisory
- https://access.redhat.com/security/cve/CVE-2024-45337 advisory
- https://access.redhat.com/security/cve/CVE-2025-22869 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_16165.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2331720 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45337 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45337 advisory
- https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909 advisory
- https://go.dev/cl/635315 advisory
- https://go.dev/issue/70779 advisory
- https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ advisory
- https://pkg.go.dev/vuln/GO-2024-3321 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2348367 issue
- https://www.cve.org/CVERecord?id=CVE-2025-22869 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22869 advisory
- https://go.dev/cl/652135 advisory
- https://go.dev/issue/71931 advisory
- https://pkg.go.dev/vuln/GO-2025-3487 advisory