VDB
RHSA-2025%3A17657
RHSA-2025%3A17657
PUBLISHED
CVSS 8.199999809265137 HIGH
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
Risk Scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:7093f1c4c31453062b617deefd52d5b816a68e312a0fd43951331337068c23d1_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-docker-builder-rhel9@sha256:7093f1c4c31453062b617deefd52d5b816a68e312a0fd43951331337068c23d1_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-multus-cni-rhel9@sha256:25b818b0231d035b7cbf76ffe196f0ae4b696745a7a800c64c1b1a24b953ce6f_s390x as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-multus-cni-rhel9@sha256:25b818b0231d035b7cbf76ffe196f0ae4b696745a7a800c64c1b1a24b953ce6f_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:746dee03ccb6fc83a85b3d7a3d709261c9b8f9c29678b6598d7e5dcd2ac4d4ae_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-cluster-etcd-rhel9-operator@sha256:746dee03ccb6fc83a85b3d7a3d709261c9b8f9c29678b6598d7e5dcd2ac4d4ae_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-bootstrap-rhel9@sha256:51dd8dc2a90cb6a0696208ab844994b557bb4bd1eb35ca885f85b79f189f4814_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-cluster-bootstrap-rhel9@sha256:51dd8dc2a90cb6a0696208ab844994b557bb4bd1eb35ca885f85b79f189f4814_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-hyperkube-rhel9@sha256:fefba7f9581f5ccd32b34f6dcc22d1fdc40f546129f8a6e13c8ba11678e53eed_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-hyperkube-rhel9@sha256:fefba7f9581f5ccd32b34f6dcc22d1fdc40f546129f8a6e13c8ba11678e53eed_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-azure-workload-identity-webhook-rhel9@sha256:6576cc5d373e4d9ea7248f1e543bbdb661e7fd7f2eecd8766e01a723bbdee9d8_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-azure-workload-identity-webhook-rhel9@sha256:6576cc5d373e4d9ea7248f1e543bbdb661e7fd7f2eecd8766e01a723bbdee9d8_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-authentication-rhel9-operator@sha256:c2e253745b41d875a9aa7e3959f72bec7d72e729281d2b858425b6bbcad3bcaf_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-cluster-authentication-rhel9-operator@sha256:c2e253745b41d875a9aa7e3959f72bec7d72e729281d2b858425b6bbcad3bcaf_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ovirt-csi-driver-rhel9@sha256:6ceb204fffa7bc686321f1da8b2e9b04c8538ddc3fec6d055b0fe12d7d3e6803_s390x as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-docker-registry-rhel9@sha256:de8998ebd9ea00a25a93112bf80ebfc99adecc758ade009f624050e0a8e14910_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel9@sha256:93e7b8c870261726d44bddc7ba0a702d3720d1838141dac837fb8c3be7c6e1a1_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-baremetal-runtimecfg-rhel9@sha256:93e7b8c870261726d44bddc7ba0a702d3720d1838141dac837fb8c3be7c6e1a1_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-networking-console-plugin-rhel9@sha256:0bec42a91a1cd97c9b3b0cca6c2f36384ccff18d8b8edf6c0ad17cbbc23e8e03_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-coredns-rhel9@sha256:37ecba79951266453dd293d4430be27a6d8e3636599440bfcf21f81f167768ea_s390x as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-coredns-rhel9@sha256:37ecba79951266453dd293d4430be27a6d8e3636599440bfcf21f81f167768ea_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-operator-rhel9@sha256:b4f51c2f25af01ee85a143edf7081276416bf1435c64ce2fb737f4d2cf40d037_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-operator-rhel9@sha256:b4f51c2f25af01ee85a143edf7081276416bf1435c64ce2fb737f4d2cf40d037_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-cluster-api-controllers-rhel9@sha256:224f95d6e43bdd9b61b7ed2463bbb0033af561025703c8215f0351b02e058be6_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:3b4a4ce10c86235e38403fa1cacdde0dede7448e181630096ba9167325718b91_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-aws-ebs-csi-driver-rhel9@sha256:3b4a4ce10c86235e38403fa1cacdde0dede7448e181630096ba9167325718b91_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-operator-lifecycle-manager-rhel9@sha256:5259aa46d4c4b6550213037b3adb348e4b2538def63dc428db399fb64477ec4b_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-operator-lifecycle-manager-rhel9@sha256:5259aa46d4c4b6550213037b3adb348e4b2538def63dc428db399fb64477ec4b_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-image-registry-rhel9-operator@sha256:4c85fd4dc29f5face0a4b37d3693067d2d927799f288650a3f45eca141cab49f_arm64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-cluster-image-registry-rhel9-operator@sha256:4c85fd4dc29f5face0a4b37d3693067d2d927799f288650a3f45eca141cab49f_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-ibm-cloud-controller-manager-rhel9@sha256:6d156ea4d01afbe1c4fabebed0babfe0b2b761037dc7c1dad9bd37956f85e389_s390x as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-rhel9-operator@sha256:3c2be9d3a55afd231864c13f902b6ac256096382cda96fe085e52f35d28f4d86_ppc64le as a component of Red Hat OpenShift Container Platform 4.18 | * |
| Red Hat | registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel9@sha256:6568510aa757ff06a9cb59d4f304b1f53c6d99b0533a63386b40a9a11bb31be3_amd64 as a component of Red Hat OpenShift Container Platform 4.18 | registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel9@sha256:6568510aa757ff06a9cb59d4f304b1f53c6d99b0533a63386b40a9a11bb31be3_amd64 |
…and 1296 more
Timeline
- Oct 15, 2025 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 30, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2025:17657 advisory
- https://access.redhat.com/security/cve/CVE-2024-45337 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17657.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2331720 issue
- https://www.cve.org/CVERecord?id=CVE-2024-45337 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45337 advisory
- https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909 advisory
- https://go.dev/cl/635315 advisory
- https://go.dev/issue/70779 advisory
- https://groups.google.com/g/golang-announce/c/-nPEi39gI4Q/m/cGVPJCqdAQAJ advisory
- https://pkg.go.dev/vuln/GO-2024-3321 advisory