https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 14:35:48 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-06638 bdu:2022-06638 https://cve.radiocsirt.org/vuln/bdu:2022-06638 https://cve.radiocsirt.org/vuln/cnvd-2017-04720 cnvd-2017-04720 https://cve.radiocsirt.org/vuln/cnvd-2017-04720 https://cve.radiocsirt.org/vuln/euvd-2026-72765 EUVD-2026-72765 https://cve.radiocsirt.org/vuln/euvd-2026-72765 https://cve.radiocsirt.org/vuln/fkie_cve-2017-3204 <p>The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.</p> <p>The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-3204 https://cve.radiocsirt.org/vuln/ghsa-xhjq-w7xm-p8qj <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>The Go SSH library (golang.org/x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks if ClientConfig.HostKeyCallback is not set. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.</p> <p><strong>Affected:</strong> Go: golang.org/x/crypto</p> <p>The Go SSH library (golang.org/x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks if ClientConfig.HostKeyCallback is not set. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.</p> https://cve.radiocsirt.org/vuln/ghsa-xhjq-w7xm-p8qj https://cve.radiocsirt.org/vuln/gsd-2017-3204 gsd-2017-3204 https://cve.radiocsirt.org/vuln/gsd-2017-3204 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-3204 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:Pro:20.04:LTS: snapd, Ubuntu:22.04:LTS: snapd, Ubuntu:24.04:LTS: snapd, Ubuntu:25.10: snapd, Ubuntu:26.04:LTS: snapd</p> <p>The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: golang-go.crypto, Ubuntu:Pro:16.04:LTS: snapd, Ubuntu:Pro:18.04:LTS: snapd, Ubuntu:Pro:20.04:LTS: snapd, Ubuntu:22.04:LTS: snapd, Ubuntu:24.04:LTS: snapd, Ubuntu:25.10: snapd, Ubuntu:26.04:LTS: snapd</p> <p>The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-3204