VDB
RHSA-2025%3A3820
RHSA-2025%3A3820
PUBLISHED
CVSS 8.199999809265137 HIGH
Record from redhat · Published April 10, 2025
A flaw was found in the x/crypto/ssh go library. Applications and libraries that misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass. For example, an attacker may send public keys A and B and authenticate with A. PublicKeyCallback would be called only twice, first with A and then with B. A vulnerable application may then make authorization decisions based on key B, for which the attacker does not control the private key. The misuse of ServerConfig.PublicKeyCallback may cause an authorization bypass.
Risk scores
CVSS 3.1
8.199999809265137
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhtas/gitsign-rhel9@sha256:bef55c43000f266cdb7cf6ea525f7c52f2ee532b7b487ae9752aac31ebded40f_amd64 as a component of Red Hat Trusted Artifact Signer 1.1 | *, registry.redhat.io/rhtas/gitsign-rhel9@sha256:bef55c43000f266cdb7cf6ea525f7c52f2ee532b7b487ae9752aac31ebded40f_amd64 |
| Red Hat | registry.redhat.io/rhtas/cosign-rhel9@sha256:2a2aa8c1a224419be83afe46b0226e168927c19c8bd3f9c4e562e5e5caebb6a9_amd64 as a component of Red Hat Trusted Artifact Signer 1.1 | registry.redhat.io/rhtas/cosign-rhel9@sha256:2a2aa8c1a224419be83afe46b0226e168927c19c8bd3f9c4e562e5e5caebb6a9_amd64, * |
| Red Hat | registry.redhat.io/rhtas/cosign-rhel9@sha256:2a2aa8c1a224419be83afe46b0226e168927c19c8bd3f9c4e562e5e5caebb6a9_amd64 as a component of Red Hat Trusted Artifact Signer 1.1 | registry.redhat.io/rhtas/cosign-rhel9@sha256:2a2aa8c1a224419be83afe46b0226e168927c19c8bd3f9c4e562e5e5caebb6a9_amd64 |
| Red Hat | registry.redhat.io/rhtas/client-server-rhel9@sha256:75f1049431f9e92898a4217870309cbbb3b39c8362e929c0bad3b53cad4459db_amd64 as a component of Red Hat Trusted Artifact Signer 1.1 | *, registry.redhat.io/rhtas/client-server-rhel9@sha256:75f1049431f9e92898a4217870309cbbb3b39c8362e929c0bad3b53cad4459db_amd64 |
| Red Hat | registry.redhat.io/rhtas/gitsign-rhel9@sha256:bef55c43000f266cdb7cf6ea525f7c52f2ee532b7b487ae9752aac31ebded40f_amd64 as a component of Red Hat Trusted Artifact Signer 1.1 | registry.redhat.io/rhtas/gitsign-rhel9@sha256:bef55c43000f266cdb7cf6ea525f7c52f2ee532b7b487ae9752aac31ebded40f_amd64, * |
| Red Hat | registry.redhat.io/rhtas/client-server-rhel9@sha256:75f1049431f9e92898a4217870309cbbb3b39c8362e929c0bad3b53cad4459db_amd64 as a component of Red Hat Trusted Artifact Signer 1.1 | *, registry.redhat.io/rhtas/client-server-rhel9@sha256:75f1049431f9e92898a4217870309cbbb3b39c8362e929c0bad3b53cad4459db_amd64 |
| Red Hat | Red Hat Trusted Artifact Signer |
Timeline
- Apr 10, 2025 CVE Published
- Apr 24, 2026 Distribution Patch (2 in total, the first dated here)
- Apr 24, 2026 Security Advisory (6 in total, the first dated here)
- Jun 18, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln RHSA-2025%3A3820
vulnetix vdb fixes RHSA-2025%3A3820Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/RHSA-2025%253A3820/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2348367 issue
- https://go.dev/cl/652135 advisory
- https://pkg.go.dev/vuln/GO-2025-3487 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-27144 advisory
- https://github.com/go-jose/go-jose/releases/tag/v4.0.5 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-30204 advisory
- https://go.dev/issue/71490 advisory
- https://access.redhat.com/errata/RHSA-2025:3820 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-45337 advisory
- https://pkg.go.dev/vuln/GO-2024-3321 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2354195 issue
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3820.json advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22868 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-22869 advisory
- https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.1 advisory
- https://pkg.go.dev/vuln/GO-2025-3553 advisory
- https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.1/html-single/release_notes/index advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2331720 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2348366 issue
…and 22 more