Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-29597 State: PUBLISHED Published: 2020-12-07T19:09:10 Last Updated: 2024-08-04T16:55:10.587Z Vendors: n/a Products: n/a Problem Types: n/a Description: IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to upload files into the server. Additional Analyst Notes: - CVE Program Container: References: - https://m4dm0e.github.io/2020/12/07/incom-insecure-up.html - https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-incom-insecure-up.md - http://packetstormsecurity.com/files/160784/Incom-CMS-2.0-File-Upload.html
CVE ID: CVE-2020-29598 State: REJECTED Published: 2021-01-19T21:54:22 Last Updated: 2021-02-05T19:33:37 Description: No description available.
CVE ID: CVE-2020-29599 State: PUBLISHED Published: 2020-12-07T00:00:00 Last Updated: 2024-08-04T16:55:10.634Z Vendors: n/a Products: n/a Problem Types: n/a Description: ImageMagick before 6.9.11-40 and 7.x before 7.0.10-40 mishandles the -authenticate option, which allows setting a password for password-protected PDF files. The user-controlled password was not properly escaped/sanitized and it was therefore possible to inject additional shell commands via coders/pdf.c. Additional Analyst Notes: - CVE Program Container: References: - https://insert-script.blogspot.com/2020/11/imagemagick-shell-injection-via-pdf.html - https://github.com/ImageMagick/ImageMagick/discussions/2851 - https://lists
1/imagemagick-shell-injection-via-pdf.html - https://github.com/ImageMagick/ImageMagick/discussions/2851 - https://lists.debian.org/debian-lts-announce/2021/01/msg00010.html - https://security.gentoo.org/glsa/202101-36 - https://lists.debian.org/debian-lts-announce/2023/03/msg00008.html
CVE ID: CVE-2020-29600 State: PUBLISHED Published: 2020-12-07T19:52:14 Last Updated: 2024-08-04T16:55:10.624Z Vendors: n/a Products: n/a Problem Types: n/a Description: In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.conf format. NOTE: this issue exists because of an incomplete fix for CVE-2017-1000501. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/eldy/awstats/issues/90 - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=891469 - https://lists.debian.org/debian-lts-announce/2020/12/msg00035.html - https://lists.fedoraproject.org/archives/list/pac
- https://lists.debian.org/debian-lts-announce/2020/12/msg00035.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/47QZWKSRZYZFESYTLSW7A6KVKOOPL7IV/
CVE ID: CVE-2020-29601 State: PUBLISHED Published: 2020-12-08T15:09:45 Last Updated: 2024-08-04T16:55:10.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the notary docker container deployed by affected versions of the docker image may allow an remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29601
CVE ID: CVE-2020-29602 State: PUBLISHED Published: 2020-12-08T15:11:30 Last Updated: 2024-08-04T16:55:10.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user. System using the irssi docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/koharin/koharin2/blob/main/CVE-2020-29602
CVE ID: CVE-2020-29603 State: PUBLISHED Published: 2021-01-29T06:41:36 Last Updated: 2024-08-04T16:55:10.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: In manage_proj_edit_page.php in MantisBT before 2.24.4, any unprivileged logged-in user can retrieve Private Projects' names via the manage_proj_edit_page.php project_id parameter, without having access to them. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=27726 - https://mantisbt.org/bugs/view.php?id=27357
CVE ID: CVE-2020-29604 State: PUBLISHED Published: 2021-01-29T06:45:19 Last Updated: 2024-08-04T16:55:10.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MantisBT before 2.24.4. A missing access check in bug_actiongroup.php allows an attacker (with rights to create new issues) to use the COPY group action to create a clone, including all bugnotes and attachments, of any private issue (i.e., one having Private view status, or belonging to a private Project) via the bug_arr[] parameter. This provides full access to potentially confidential information. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?i
ntial information. Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=27357 - https://mantisbt.org/bugs/view.php?id=27728
CVE ID: CVE-2020-29605 State: PUBLISHED Published: 2021-01-29T06:43:17 Last Updated: 2024-08-04T16:55:10.576Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in MantisBT before 2.24.4. Due to insufficient access-level checks, any logged-in user allowed to perform Group Actions can get access to the Summary fields of private Issues via bug_arr[]= in a crafted bug_actiongroup_page.php URL. (The target Issues can have Private view status, or belong to a private Project.) Additional Analyst Notes: - CVE Program Container: References: - https://mantisbt.org/bugs/view.php?id=27357 - https://mantisbt.org/bugs/view.php?id=27727
CVE ID: CVE-2020-29606 State: REJECTED Published: 2020-12-15T20:36:42 Last Updated: 2020-12-15T20:36:41 Description: No description available.
CVE ID: CVE-2020-29607 State: PUBLISHED Published: 2020-12-16T14:28:27.000Z Last Updated: 2025-04-16T14:24:37.581Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload restriction bypass vulnerability in Pluck CMS before 4.7.13 allows an admin privileged user to gain access in the host through the "manage files" functionality, which may result in remote code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pluck-cms/pluck/issues/96 - http://packetstormsecurity.com/files/162785/Pluck-CMS-4.7.13-Remote-Shell-Upload.html - https://github.com/Hacker5preme/Exploits/tree/main/CVE-2020-29607-Exploit - https://github.com/MarkLee131/aw
load.html - https://github.com/Hacker5preme/Exploits/tree/main/CVE-2020-29607-Exploit - https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2020-29607.md
CVE ID: CVE-2020-29608 State: PUBLISHED Published: 2021-04-02T17:40:45 Last Updated: 2024-08-04T16:55:10.624Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: A remote attacker may be able to leak memory Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, watchOS 7.2. A remote attacker may be able to leak memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en
ay be able to leak memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212147 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005 - https://support.apple.com/en-us/HT212009
CVE ID: CVE-2020-29610 State: PUBLISHED Published: 2021-04-02T17:40:24 Last Updated: 2024-08-04T16:55:10.631Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted audio file may disclose restricted memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted audio file may disclose restricted memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://supp
Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005 - https://support.apple.com/en-us/HT212009
CVE ID: CVE-2020-29611 State: PUBLISHED Published: 2021-04-02T17:42:03 Last Updated: 2024-08-04T16:55:10.706Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.
ead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005 - https://support.apple.com/en-us/HT212009 - https://support.apple.com/en-us/HT212145
CVE ID: CVE-2020-29612 State: PUBLISHED Published: 2021-04-02T17:39:41 Last Updated: 2024-08-04T16:55:10.632Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to execute arbitrary code with system privileges Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to execute arbitrary code with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-29613 State: PUBLISHED Published: 2021-04-02T17:41:05 Last Updated: 2024-08-04T16:55:10.697Z Vendors: Apple Products: iOS and iPadOS Problem Types: An enterprise application installation prompt may display the wrong domain Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 14.3 and iPadOS 14.3. An enterprise application installation prompt may display the wrong domain. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212003
CVE ID: CVE-2020-29614 State: PUBLISHED Published: 2021-04-02T17:41:34 Last Updated: 2024-08-04T16:55:10.608Z Vendors: Apple Products: iOS and iPadOS, tvOS, macOS Problem Types: Processing a maliciously crafted file may lead to heap corruption Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted file may lead to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en
y lead to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212147 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005
CVE ID: CVE-2020-29615 State: PUBLISHED Published: 2021-04-02T17:42:36 Last Updated: 2024-08-04T16:55:10.727Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted image may lead to a denial of service Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted image may lead to a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.appl
al Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005 - https://support.apple.com/en-us/HT212009
CVE ID: CVE-2020-29616 State: PUBLISHED Published: 2021-04-02T17:42:19 Last Updated: 2024-08-04T16:55:10.656Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-29617 State: PUBLISHED Published: 2021-04-02T17:43:33 Last Updated: 2024-08-04T16:55:10.604Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted image may lead to heap corruption Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - htt
ruption. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005 - https://support.apple.com/en-us/HT212009 - https://support.apple.com/en-us/HT212145
CVE ID: CVE-2020-29618 State: PUBLISHED Published: 2021-04-02T17:43:14 Last Updated: 2024-08-04T16:55:10.705Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en
arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005 - https://support.apple.com/en-us/HT212009 - https://support.apple.com/en-us/HT212145
CVE ID: CVE-2020-29619 State: PUBLISHED Published: 2021-04-02T17:44:12 Last Updated: 2024-08-04T16:55:10.639Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted image may lead to heap corruption Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 14.3, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, iCloud for Windows 12.0, watchOS 7.2. Processing a maliciously crafted image may lead to heap corruption. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - htt
CVE ID: CVE-2020-29620 State: PUBLISHED Published: 2021-04-02T17:42:55 Last Updated: 2024-08-04T16:55:10.633Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to elevate privileges Description: This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-29621 State: PUBLISHED Published: 2021-04-02T17:43:53 Last Updated: 2024-08-04T16:55:10.699Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to bypass Privacy preferences Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to bypass Privacy preferences. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-29622 State: PUBLISHED Published: 2021-10-19T13:12:47 Last Updated: 2024-08-04T16:55:10.588Z Vendors: Apple Products: Security Update - Catalina Problem Types: Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges Description: A race condition was addressed with additional validation. This issue is fixed in Security Update 2021-005 Catalina. Mounting a maliciously crafted NFS network share may lead to arbitrary code execution with system privileges. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212805
CVE ID: CVE-2020-29623 State: PUBLISHED Published: 2021-04-02T17:44:36 Last Updated: 2024-08-04T16:55:10.641Z Vendors: Apple Products: iOS and iPadOS, tvOS, macOS Problem Types: A user may be unable to fully delete browsing history Description: "Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete browsing history. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us
Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212003 - https://support.apple.com/en-us/HT212005 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/ - https://security.gentoo.org/glsa/202104-03
CVE ID: CVE-2020-29624 State: PUBLISHED Published: 2021-04-02T17:45:34 Last Updated: 2024-08-04T16:55:10.676Z Vendors: Apple Products: iOS and iPadOS, tvOS, watchOS, macOS Problem Types: Processing a maliciously crafted font file may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of font files. This issue was addressed with improved input validation. This issue is fixed in watchOS 7.2, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. Processing a maliciously crafted font file may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: Ref
CVE ID: CVE-2020-29625 State: PUBLISHED Published: 2021-04-02T17:45:18 Last Updated: 2024-08-04T16:55:10.637Z Vendors: Apple Products: macOS Problem Types: Processing a maliciously crafted image may lead to arbitrary code execution Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011
CVE ID: CVE-2020-29629 State: PUBLISHED Published: 2021-10-28T18:16:56 Last Updated: 2024-08-04T16:55:10.651Z Vendors: Apple Products: macOS Problem Types: A malicious application may be able to read restricted memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to read restricted memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211931
CVE ID: CVE-2020-29633 State: PUBLISHED Published: 2021-04-02T17:47:19 Last Updated: 2024-08-04T16:55:10.693Z Vendors: Apple Products: macOS Problem Types: An attacker in a privileged network position may be able to bypass authentication policy Description: An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. An attacker in a privileged network position may be able to bypass authentication policy. Additional Analyst Notes: - CVE Program Container: References: - https://support.ap
ble to bypass authentication policy. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT212011 - https://support.apple.com/en-us/HT212147
CVE ID: CVE-2020-29639 State: PUBLISHED Published: 2021-04-02T17:44:58 Last Updated: 2024-08-04T16:55:10.625Z Vendors: Apple Products: iOS and iPadOS Problem Types: Processing a maliciously crafted font may result in the disclosure of process memory Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.0 and iPadOS 14.0. Processing a maliciously crafted font may result in the disclosure of process memory. Additional Analyst Notes: - CVE Program Container: References: - https://support.apple.com/en-us/HT211850
CVE ID: CVE-2020-29651 State: PUBLISHED Published: 2020-12-09T06:58:22.000Z Last Updated: 2025-11-03T21:44:20.561Z Vendors: n/a Products: n/a Problem Types: n/a Description: A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pytest-dev/py/issues/256 - https://github.com/pytest-dev/py/pull/257 - https://github.com/pytest-dev/py/pull/257/commits/4a9017dc6199d2a564b6e4b0aa39d6d8870e4144 - https://lists.fedoraproject.org/arc
github.com/pytest-dev/py/pull/257/commits/4a9017dc6199d2a564b6e4b0aa39d6d8870e4144 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AYWNYEV3FGDHPIHX4DDUDMFZ6NLCQRC4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHDTINIBJZ67T3W74QTBIY5LPKAXEOGR/ - https://www.oracle.com/security-alerts/cpujul2022.html
CVE ID: CVE-2020-29652 State: PUBLISHED Published: 2020-12-17T04:12:17 Last Updated: 2024-08-04T16:55:10.695Z Vendors: n/a Products: n/a Problem Types: n/a Description: A nil pointer dereference in the golang.org/x/crypto/ssh component through v0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to cause a denial of service against SSH servers. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/g/golang-announce/c/ouZIlBimOsE?pli=1 - https://go-review.googlesource.com/c/crypto/+/278852 - https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E