Vulnerability · Published Dec 17, 2020 · Assigned by mitre
CVE-2020-29652
High 7.5
In plain English
A high-severity security flaw in the cockpit-podman package (AlmaLinux). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.2% (higher than 88% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)3.2%top 11.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | cockpit-podman | 29-2.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | conmon | 2:2.0.26-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | containernetworking-plugins | 0.9.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | crit | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | criu | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | fuse-overlayfs | 1.4.0-2.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | libslirp | 4.3.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | libslirp-devel | 4.3.1-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | python3-criu | 3.15-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | slirp4netns | 1.1.8-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| AlmaLinux:8 | udica | 0.2.4-1.module_el8.6.0+2876+9ed4eae2 | ALSA-2021:1796 |
| Debian:12 | golang-go.crypto | 1:0.0~git20201221.eec23a3-1 | DEBIAN-CVE-2020-29652 |
| Debian:13 | golang-go.crypto | 1:0.0~git20201221.eec23a3-1 | DEBIAN-CVE-2020-29652 |
| Debian:14 | golang-go.crypto | 1:0.0~git20201221.eec23a3-1 | DEBIAN-CVE-2020-29652 |
| Go | golang.org/x/crypto | 0.0.0-20201216223049-8b5274cf687f | GHSA-3vm4-22fp-5rfm |
| Go | golang.org/x/crypto | 0.0.0-20201216223049-8b5274cf687f | GO-2021-0227 |
| Rocky Linux:8 | buildah | 0:1.19.7-1.module+el8.4.0+558+7340b765 | RLSA-2021:1796 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.6.0+783+10209741 | RLSA-2021:1796 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.4.0+556+40122d08 | RLSA-2021:1796 |
| Rocky Linux:8 | cockpit-podman | 0:29-2.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:1796 |
| Rocky Linux:8 | conmon | 2:2.0.26-1.module+el8.4.0+558+7340b765 | RLSA-2021:1796 |
| Rocky Linux:8 | conmon | 2:2.0.26-1.module+el8.6.0+783+10209741 | RLSA-2021:1796 |
| Rocky Linux:8 | conmon | 2:2.0.26-1.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | container-selinux | 2:2.158.0-1.module+el8.4.0+558+7340b765 | RLSA-2021:1796 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.4.0+556+40122d08 | RLSA-2021:1796 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.6.0+783+10209741 | RLSA-2021:1796 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:1796 |
| Rocky Linux:8 | containernetworking-plugins | 0:0.9.1-1.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.6.0+783+10209741 | RLSA-2021:1796 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:1796 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.4.0+556+40122d08 | RLSA-2021:1796 |
| Rocky Linux:8 | criu | 0:3.15-1.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-2.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-2.module+el8.4.0+558+7340b765 | RLSA-2021:1796 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-2.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:1796 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.4.0-2.module+el8.6.0+783+10209741 | RLSA-2021:1796 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:1796 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.6.0+783+10209741 | RLSA-2021:1796 |
| Rocky Linux:8 | libslirp | 0:4.3.1-1.module+el8.4.0+556+40122d08 | RLSA-2021:1796 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.0-2.module+el8.4.0+556+40122d08 | RLSA-2021:1796 |
| Rocky Linux:8 | podman | 0:3.0.1-6.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | podman | 0:3.0.1-6.module+el8.4.0+558+7340b765 | RLSA-2021:1796 |
| Rocky Linux:8 | skopeo | 1:1.2.2-8.module+el8.5.0+661+c0df01f6 | RLSA-2021:1796 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:1796 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.6.0+783+10209741 | RLSA-2021:1796 |
| Rocky Linux:8 | slirp4netns | 0:1.1.8-1.module+el8.4.0+537+38cf4e42 | RLSA-2021:1796 |
| Rocky Linux:8 | toolbox | 0:0.0.8-1.module+el8.4.0+556+40122d08 | RLSA-2021:1796 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.6.0+783+10209741 | RLSA-2021:1796 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.5.0+709+440d5e7e | RLSA-2021:1796 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.4.0+556+40122d08 | RLSA-2021:1796 |
| Rocky Linux:8 | udica | 0:0.2.4-1.module+el8.7.0+1076+9b1c11c1 | RLSA-2021:1796 |
| Ubuntu:22.04:LTS | golang-go.crypto | 1:0.0~git20201221.eec23a3-1 | UBUNTU-CVE-2020-29652 |
Affected products (as reported)
References
- https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1 x_refsource_MISC
- https://go-review.googlesource.com/c/crypto/+/278852 x_refsource_MISC
- [skywalking-notifications] 20211018 [GitHub] [skywalking-swck] hanahmily opened a new pull request #37: Fix vulnerabilities mailing-list, x_refsource_MLIST