Search for packages
Package details: pkg:deb/ubuntu/golang-go.crypto@1:0.0~git20151201.0.7b85b09-1
purl pkg:deb/ubuntu/golang-go.crypto@1:0.0~git20151201.0.7b85b09-1
Next non-vulnerable version 1:0.0~git20170629.0.5ef0053-2
Latest non-vulnerable version 1:0.0~git20170629.0.5ef0053-2
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-r4f9-fcbj-aaag
Aliases:
CVE-2017-3204
GHSA-xhjq-w7xm-p8qj
The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.
1:0.0~git20170629.0.5ef0053-2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version