VYPR
← All advisories
Moderate severityNVD Advisory· Published Nov 19, 2025· Updated Nov 20, 2025

Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

CVE-2025-47914

Description

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
golang.org/x/cryptoGo
< 0.45.00.45.0

Affected products

5461

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.