Upstream information
CVE-2020-29652 at MITRE
Description
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.
SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having important severity.
CVSS v2 Scores
| | National Vulnerability Database |
|---|
| Base Score | 5 |
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| Access Vector | Network |
| Access Complexity | Low |
| Authentication | None |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | Partial |
CVSS v3 Scores
| | National Vulnerability Database |
|---|
| Base Score | 7.5 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| Attack Vector | Network |
| Attack Complexity | Low |
| Privileges Required | None |
| User Interaction | None |
| Scope | Unchanged |
| Confidentiality Impact | None |
| Integrity Impact | None |
| Availability Impact | High |
| CVSSv3 Version | 3.1 |
No SUSE Bugzilla entries cross referenced.
No SUSE Security Announcements cross referenced.
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|
| SUSE Liberty Linux 8 | buildah >= 1.19.7-1.module+el8.4.0+10607+f4da7515buildah-tests >= 1.19.7-1.module+el8.4.0+10607+f4da7515cockpit-podman >= 29-2.module+el8.4.0+10607+f4da7515conmon >= 2.0.26-1.module+el8.4.0+10607+f4da7515container-selinux >= 2.158.0-1.module+el8.4.0+10607+f4da7515containernetworking-plugins >= 0.9.1-1.module+el8.4.0+10607+f4da7515containers-common >= 1.2.2-8.module+el8.4.0+10607+f4da7515crit >= 3.15-1.module+el8.4.0+10607+f4da7515criu >= 3.15-1.module+el8.4.0+10607+f4da7515crun >= 0.18-1.module+el8.4.0+10607+f4da7515fuse-overlayfs >= 1.4.0-2.module+el8.4.0+10607+f4da7515libslirp >= 4.3.1-1.module+el8.4.0+10607+f4da7515libslirp-devel >= 4.3.1-1.module+el8.4.0+10607+f4da7515oci-seccomp-bpf-hook >= 1.2.0-2.module+el8.4.0+10607+f4da7515podman >= 3.0.1-6.module+el8.4.0+10607+f4da7515podman-catatonit >= 3.0.1-6.module+el8.4.0+10607+f4da7515podman-docker >= 3.0.1-6.module+el8.4.0+10607+f4da7515podman-plugins >= 3.0.1-6.module+el8.4.0+10607+f4da7515podman-remote >= 3.0.1-6.module+el8.4.0+10607+f4da7515podman-tests >= 3.0.1-6.module+el8.4.0+10607+f4da7515python3-criu >= 3.15-1.module+el8.4.0+10607+f4da7515runc >= 1.0.0-70.rc92.module+el8.4.0+10607+f4da7515skopeo >= 1.2.2-8.module+el8.4.0+10607+f4da7515skopeo-tests >= 1.2.2-8.module+el8.4.0+10607+f4da7515slirp4netns >= 1.1.8-1.module+el8.4.0+10607+f4da7515toolbox >= 0.0.8-1.module+el8.4.0+10607+f4da7515udica >= 0.2.4-1.module+el8.4.0+10607+f4da7515
| Patchnames:
RHSA-2021:1796 |
| openSUSE Tumbleweed | | Patchnames:
openSUSE Tumbleweed GA velero-1.7.1-1.1 |
SUSE Timeline for this CVE
CVE page created: Thu Dec 17 13:06:17 2020
CVE page last modified: Mon Oct 30 18:11:46 2023
