CVE-2021-43565
HighAdvisory
Published 7 Sept 2022In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.011
- 64th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 672
- of 17,787 indexed, latest versions
- Container images
- 700
- deployed by those charts
- Fix available
- 1 of 1
- affected package
x/crypto/ssh vulnerable to panic via malformed packets
Carried by container images the latest versions of 672 of 17,787 indexed charts deploy, on 700 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| golang.org/ | v0.0.0-20180808211826-de0752318171, v0.0.0-20181025213731-e84da0312774, v0.0.0-20181029021203-45a5f77698d3, v0.0.0-20181203042331-505ab145d0a9+71 more | 0.0.0-20211202192323-5770296d904e | 700 |
- OSV records
- GHSA-gwc9-m7rh-j2ww
- Also known as
- GO-2022-0968
Charts affected
672 by stars
Container images carrying it
700 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 57419b6d3830 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 47f88b18fb7c | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 05aa441b20aa | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 00ce11c31087 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 087618d16b83 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 8e7b44bbd123 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 5e409a6332b4 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | d523c2c010cd | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 23dc6274cc4b | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 0b2a41c2a43e | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | ded797477896 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | e949b0f733f0 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | aac0389614e4 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 04ae1fc698a5 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 09741c86aee7 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 1f7f89bc6585 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | dfa5907170c4 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 3609a075c825 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 2fe6b69b20d7 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 0bb44992b62c | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | edc238a538a0 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | f5dd1f7794c6 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | b61c750ade19 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 5a10cd095699 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 0fae829caf29 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 119e24f24b1d | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | fafb72e98f22 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | e9bde36e34b7 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | f4324baa2aad | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | f681e0343a31 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| ghcr.io/ | 3491a0f31c4a | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| mcr.microsoft.com/ | ec1803037ed9 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| mcr.microsoft.com/ | f55f30876129 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| mcr.microsoft.com/ | 667b1b1ea1e4 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| mcr.microsoft.com/ | 7997e0f236bc | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| public.ecr.aws/ | 67b89ae52240 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| public.ecr.aws/ | 02aed3370fce | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| public.ecr.aws/ | b32c99e7bc45 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| public.ecr.aws/ | cac3ed9a9826 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| public.ecr.aws/ | ae59d222fd87 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| public.ecr.aws/ | efcecf98b912 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | 5b6701d8fb31 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | cdefc81c6b2e | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | 28a674af1df2 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | d6fd2a9e3273 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | 13aaae779248 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | 5d1c2cf4c538 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | fe2e2e5a2751 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | a3b9a07648b6 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |
| quay.io/ | 158108f70f95 | golang.org/ | 0.0.0-20211202192323-5770296d904e | 1 |