In short
- CVE-2024-39223 is a CRITICAL (CVSS 9.8) vulnerability affecting github.com/ginuerzh/gost.
- Chance of exploitation in the next 30 days (EPSS): 0.70%, higher than 53.3% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey
NVD description
An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey
More vulnerabilities in github.com/ginuerzh/gost
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free