Skip to content
Fencer Vulns
high 7.5

CVE-2021-43565 json

x/crypto/ssh vulnerable to panic via malformed packets

published 2022-09-06 4 y ago modified 2026-09-10 1 mo ago also GHSA-gwc9-m7rh-j2ww , GO-2022-0968 , EUVD-2022-6832

cvss
7.5
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.2%
EPSS 1.2% chance of exploitation in 30 days, percentile 68%
public exploits
0
none known

Summary

The x/crypto/ssh package before 0.0.0-20211202192323-5770296d904e of golang.org/x/crypto allows an attacker to panic an SSH server.

Patch / fix

  • go golang.org/x/crypto 0.0.0-20211202192323-5770296d904e
  • golang ssh 0.0.0-20211202192323-5770296d904e
  • golang-go.crypto Debian 14, Debian 13, Debian 12 1:0.0~git20211202.5770296-1

debian advisories DEBIAN-CVE-2021-43565

  • crit openshift 4.11 3.15-4.rhaos4.11.el8
  • criu openshift 4.11 3.15-4.rhaos4.11.el8
  • crun openshift 4.11 1.4.2-1.rhaos4.11.el8
  • runc openshift 4.11 3:1.1.2-1.rhaos4.11.el8
  • cri-o openshift 4.11 1.24.1-11.rhaos4.11.gitb0d2ef3.el8
  • butane openshift 4.11 0.15.0-1.rhaos4.11.el8
  • conmon openshift 4.11 2:2.1.2-2.rhaos4.11.el8
  • podman openshift 4.11 2:4.0.2-6.rhaos4.11.el8

red hat advisories RHSA-2022:5068RHSA-2022:1361RHSA-2022:1276

  • docker-stable SLES for SAP 15 SP5, SLES for SAP 15 SP4, SLES for SAP 15 SP3 +12 more 24.0.9_ce-150000.1.25.1
  • docker SLES for SAP 15 SP2, SLES for SAP 15 SP1, SLES for SAP 15 +23 more 20.10.14_ce-150000.163.1
  • containerd SLES for SAP 15 SP2, SLES for SAP 15 SP1, SLES for SAP 15 +24 more 1.5.11-150000.68.1
  • docker-kubic openSUSE Leap 15.4, openSUSE Leap 15.3 20.10.14_ce-150000.163.1
  • docker SLE Module for Containers 12 20.10.14_ce-98.80.1
  • containerd SLE Module for Containers 12 1.5.11-16.57.1
  • kubevirt SLE Module for Containers 15 SP3 0.49.0-150300.8.10.1
  • kubevirt SLES for SAP 15 SP2, SLES 15 SP2-LTSS, SLES 15 SP2-BCL +6 more 0.40.0-5.17.2

suse advisories SUSE-SU-2025:03545-1SUSE-SU-2025:03540-1SUSE-SU-2022:1689-1SUSE-SU-2022:1507-1SUSE-SU-2022:0526-1SUSE-SU-2022:0130-1

  • kubevirt1.8 openSUSE Tumbleweed 1.8.3-1.1
  • kubevirt-1.8 openSUSE Tumbleweed 1.8.3-1.1
  • docker-stable openSUSE Tumbleweed 24.0.9_ce-15.1
  • kubevirt openSUSE Tumbleweed 0.49.0-1.1
  • docker openSUSE Tumbleweed 20.10.14_ce-2.1
  • kubevirt openSUSE Leap 15.3 0.49.0-150300.8.10.1
  • kafka Package Hub 15 SP2 2.1.0-bp152.2.3.1
  • kubevirt openSUSE Leap 15.3 0.45.0-8.7.1

opensuse advisories openSUSE-SU-2026:11091-1openSUSE-SU-2026:11057-1openSUSE-SU-2025:15589-1openSUSE-SU-2024:11735-1openSUSE-SU-2024:12034-1openSUSE-SU-2022:0526-1

  • gh CBL-Mariner 2.0 2.13.0-19
  • cri-o CBL-Mariner 2.0 1.22.3-5
  • moby-buildx CBL-Mariner 2.0 0.7.1-20
  • cf-cli CBL-Mariner 2.0 8.4.0-18
  • libcontainers-common CBL-Mariner 2.0 20210626-5

azure linux advisories AZL-43338AZL-43341AZL-43344AZL-43347AZL-43348

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2021-43565 updated cvss 7.5

golang.org/x/crypto: empty plaintext packet causes panic

  • Red Hat Migration Toolkit for Containers rhmtc/openshift-migration-velero-rhel8
    affected: no fix planned “Will not fix”
  • Red Hat OpenShift Serverless openshift-serverless-1/kn-eventing-apiserver-receive-adapter-rhel9
    affected: no fix available
  • Red Hat OpenShift Service Mesh 1 ior, servicemesh, servicemesh-mixc, servicemesh-mixs, servicemesh-galley, servicemesh-citadel, +6 more
    affected: no fix planned “Out of support scope”
  • Red Hat OpenShift Service Mesh 2.0 servicemesh, servicemesh-mixc, servicemesh-mixs, servicemesh-grafana, servicemesh-istioctl, servicemesh-operator, +4 more Red Hat OpenShift Service Mesh 2.1 servicemesh, servicemesh-cni, servicemesh-grafana, servicemesh-pilot-agent, servicemesh-pilot-discovery
    affected: no fix available
  • Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/work-rhel8, rhacm2/search-rhel8, rhacm2/thanos-rhel7, rhacm2/acmesolver-rhel8, rhacm2/cainjector-rhel8, rhacm2/gatekeeper-rhel8, +49 more
    affected: no fix available, no fix planned “Will not fix”
  • Red Hat Advanced Cluster Security 3 advanced-cluster-security/rhacs-scanner-rhel8
    affected: no fix planned “Will not fix”
  • Red Hat AMQ Broker 7 ansible-automation-platform-24/controller-rhel8-operator
    affected: no fix available
  • Red Hat Ceph Storage 2 golang, grafana, golang-bin, golang-src Red Hat Ceph Storage 3 golang, grafana, golang-bin, golang-src, grafana-container, prometheus-node-exporter Red Hat Enterprise Linux 7 golang, golang-bin, golang-src, golang-misc, golang-tests Red Hat OpenShift Container Platform 3.11 atomic-openshift, atomic-openshift-pod, atomic-openshift-node, atomic-openshift-tests, atomic-openshift-master, atomic-openshift-clients, +7 more
    affected: no fix planned “Out of support scope”
show 12 more
  • Red Hat Openshift Data Foundation 4 noobaa-operator-container Red Hat OpenStack Platform 16.2 osp-director-provisioner-container
    affected: no fix available
  • Red Hat Quay 3 quay/quay-builder-rhel8
    affected: no fix planned “Will not fix”
  • Red Hat Storage 3 heketi, heketi-client, python-heketi, rhgs3/rhgs-gluster-block-prov-rhel7
    affected: no fix planned “Out of support scope”
  • Red Hat Middleware Containers for OpenShift amq7/amq-broker-rhel8-operator 7.12.0-16, amq7/amq-broker-rhel8-operator-bundle 7.12.0-10
    fixed: vendor fix RHSA-2024:2944
  • Red Hat OpenShift Service Mesh 2.0 kiali v1.24.7.redhat1-1.el8
    fixed: vendor fix RHSA-2022:1276
  • Red Hat Ceph Storage 8.1 rhceph/grafana-rhel9 1791176238
    fixed: vendor fix RHSA-2026:79243
  • Red Hat OpenShift Container Platform 4.11 podman 4.0.2-6.rhaos4.11.el8, podman-tests 4.0.2-6.rhaos4.11.el8, podman-docker 4.0.2-6.rhaos4.11.el8, podman-remote 4.0.2-6.rhaos4.11.el8, podman-plugins 4.0.2-6.rhaos4.11.el8, podman-catatonit 4.0.2-6.rhaos4.11.el8, +5 more
    fixed: vendor fix RHSA-2022:5068
  • Red Hat OpenShift Serverless 1.26 openshift-serverless-1/client-kn-rhel8 1.5.0-3, openshift-serverless-1/func-utils-rhel8 1.26.0-1, openshift-serverless-1/serving-queue-rhel8 1.5.0-2, openshift-serverless-1/eventing-mtping-rhel8 1.5.0-2, openshift-serverless-1/kourier-control-rhel8 1.5.0-1, openshift-serverless-1/serving-webhook-rhel8 1.5.0-2, +31 more
    fixed: vendor fix RHSA-2022:8938
  • Red Hat OpenStack Platform 16.2 rhosp-rhel8-tech-preview/osp-director-operator 1.2.3-3
    fixed: vendor fix RHSA-2022:5673
  • Red Hat RHACS 3.69 for RHEL 8 advanced-cluster-security/rhacs-main-rhel8 3.69.2-5
    fixed: vendor fix RHSA-2022:5188
  • Red Hat RHODF 4.10 for RHEL 8 mcg 5.10.0-72.el8, odf4/cephcsi-rhel8 v4.10.0-35, odf4/mcg-core-rhel8 v4.10.0-12, mcg-redistributable 5.10.0-72.el8, odf4/odf-console-rhel8 v4.10.0-27, odf4/odf-topolvm-rhel8 v4.10.0-16, +20 more
    fixed: vendor fix RHSA-2022:1361
  • Red Hat Ironic content for Red Hat OpenShift Container Platform 4.11 pysnmp 4.4.8-3.el8, pyparsing 2.3.1-2.el8, libsodium 1.0.16-5.el8, python-pbr 5.5.1-2.el8, python-yappi 1.0-3.el8, python-amqp 2.5.2-8.el8, +273 more Red Hat Middleware Containers for OpenShift amq7/amq-broker-rhel8 7.12.0-7, amq7/amq-broker-init-rhel8 7.12.0-7 Red Hat OpenShift Service Mesh 2.0 servicemesh 2.0.9-3.el8, servicemesh-cni 2.0.9-3.el8, servicemesh-mixc 2.0.9-3.el8, servicemesh-mixs 2.0.9-3.el8, servicemesh-proxy 2.0.9-3.el8, servicemesh-istioctl 2.0.9-3.el8, +4 more Red Hat Advanced Cluster Management for Kubernetes 2 rhacm2/subctl-rhel9, rhacm2/lighthouse-agent-rhel9, rhacm2/submariner-addon-rhel8, rhacm2/lighthouse-coredns-rhel9, rhacm2/submariner-gateway-rhel8, rhacm2/submariner-rhel8-operator, +4 more Red Hat Ceph Storage 4 rhceph/rhceph-4-dashboard-rhel8 Red Hat Ceph Storage 5 rhceph/rhceph-5-dashboard-rhel8
    +10 more products
    Red Hat Ceph Storage 8.1 rhceph/rhceph-8-rhel9 1791176990, rhceph/keepalived-rhel9 1791175257, rhceph/oauth2-proxy-rhel9 1791176282, rhceph/snmp-notifier-rhel9 1791176336, rhceph/rhceph-haproxy-rhel9 1791176338, rhceph/rhceph-promtail-rhel9 1791176366 Red Hat Enterprise Linux 8 golang, go-toolset, golang-bin, golang-src, golang-misc, golang-race, +1 more Red Hat Enterprise Linux 9 golang, go-toolset, golang-bin, golang-src, golang-misc, golang-race, +1 more Red Hat OpenShift Container Platform 4.11 buildah 1.23.4-2.el8, haproxy 2.2.24-1.el8, haproxy22 2.2.24-1.el8, cri-tools 1.24.2-4.1.el8, crit 3.15-4.rhaos4.11.el8, criu 3.15-4.rhaos4.11.el8, +232 more Red Hat Openshift Sandboxed Containers osc-operator Red Hat OpenShift Virtualization 4 kubevirt, container-native-virtualization/cluster-network-addons-operator Red Hat OpenStack Platform 16.1 etcd Red Hat OpenStack Platform 16.2 etcd, rhosp-rhel8-tech-preview/osp-director-downloader, rhosp-rhel8-tech-preview/osp-director-downloader 1.2.3-3, rhosp-rhel8-tech-preview/osp-director-operator-bundle 1.2.3-5 Red Hat Storage 3 etcd, golang, grafana, golang-bin, golang-src, golang-misc, +1 more Red Hat RHACS 3.69 for RHEL 8 advanced-cluster-security/rhacs-docs-rhel8 3.69.2-4, advanced-cluster-security/rhacs-roxctl-rhel8 3.69.2-3, advanced-cluster-security/rhacs-scanner-rhel8 3.69.2-4, advanced-cluster-security/rhacs-rhel8-operator 3.69.2-4, advanced-cluster-security/rhacs-collector-rhel8 3.69.2-3, advanced-cluster-security/rhacs-operator-bundle 3.69.2-5, +4 more
    not affected: vulnerable code not present

2 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

1.19% chance of exploitation in the next 30 days, higher than 68% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
GitHub 3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected packages

ecosystem package affected fixed in
go golang.org/x/crypto
<0.0.0-20211202192323-5770296d904e
0.0.0-20211202192323-5770296d904e

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.