Bug 883667 (CVE-2022-27191)

Summary:	[Tracker] Denial of service in Go's crypto/ssh
Product:	Gentoo Security	Reporter:	John Helmert III <ajak>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	CONFIRMED ---
Severity:	normal
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:	883653, 838232
Bug Blocks:

Description John Helmert III archtester

2022-11-29 19:28:09 UTC

CVE-2022-27191 (https://groups.google.com/g/golang-announce/c/-cp44ypCT5s):

golang.org/x/crypto/ssh before 0.0.0-20220314234659-1baeb1ce4c0b in Go through 1.16.15 and 1.17.x through 1.17.8 allows an attacker to crash a server in certain circumstances involving AddHostKey.