CVE-2025-47914 - Vulnerability Details - OpenCVE

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Golang	Crypto Ssh

No data.

No data.

References

Link	Providers
https://go.dev/cl/721960
https://go.dev/issue/76364
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
https://pkg.go.dev/vuln/GO-2025-4135

History

Fri, 21 Nov 2025 09:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Golang Golang crypto Golang ssh
Vendors & Products		Golang Golang crypto Golang ssh

Thu, 20 Nov 2025 17:30:00 +0000

Type	Values Removed	Values Added
Title	CVE-2025-47914 in golang.org/x/crypto/ssh/agent	Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent

Wed, 19 Nov 2025 21:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-125
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 19 Nov 2025 20:45:00 +0000

Type	Values Removed	Values Added
Description		SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Title		CVE-2025-47914 in golang.org/x/crypto/ssh/agent
References		https://go.dev/cl/721960 https://go.dev/issue/76364 https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA https://pkg.go.dev/vuln/GO-2025-4135

MITRE

Status: PUBLISHED

Assigner: Go

Published: 2025-11-19T20:33:43.126Z

Updated: 2025-11-20T17:15:00.344Z

Reserved: 2025-05-13T23:31:29.597Z

Link: CVE-2025-47914

Vulnrichment

Updated: 2025-11-19T20:50:22.359Z

NVD

Status : Awaiting Analysis

Published: 2025-11-19T21:15:50.517

Modified: 2025-11-21T15:13:59.083

Link: CVE-2025-47914

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-47914", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "state": "PUBLISHED", "assignerShortName": "Go", "dateReserved": "2025-05-13T23:31:29.597Z", "datePublished": "2025-11-19T20:33:43.126Z", "dateUpdated": "2025-11-20T17:15:00.344Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2025-11-20T17:15:00.344Z"}, "title": "Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent", "descriptions": [{"lang": "en", "value": "SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read."}], "affected": [{"vendor": "golang.org/x/crypto", "product": "golang.org/x/crypto/ssh/agent", "collectionURL": "https://pkg.go.dev", "packageName": "golang.org/x/crypto/ssh/agent", "versions": [{"version": "0", "lessThan": "0.45.0", "status": "affected", "versionType": "semver"}], "programRoutines": [{"name": "parseConstraints"}, {"name": "ForwardToAgent"}, {"name": "ServeAgent"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-237"}]}], "references": [{"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"}, {"url": "https://go.dev/cl/721960"}, {"url": "https://go.dev/issue/76364"}, {"url": "https://pkg.go.dev/vuln/GO-2025-4135"}], "credits": [{"lang": "en", "value": "Jakub Ciolek"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-125", "lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-11-19T20:50:27.263405Z", "id": "CVE-2025-47914", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-19T20:50:30.968Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-47914", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-19T20:50:27.263405Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-19T20:50:22.359Z"}}], "cna": {"title": "Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent", "credits": [{"lang": "en", "value": "Jakub Ciolek"}], "affected": [{"vendor": "golang.org/x/crypto", "product": "golang.org/x/crypto/ssh/agent", "versions": [{"status": "affected", "version": "0", "lessThan": "0.45.0", "versionType": "semver"}], "packageName": "golang.org/x/crypto/ssh/agent", "collectionURL": "https://pkg.go.dev", "defaultStatus": "unaffected", "programRoutines": [{"name": "parseConstraints"}, {"name": "ForwardToAgent"}, {"name": "ServeAgent"}]}], "references": [{"url": "https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA"}, {"url": "https://go.dev/cl/721960"}, {"url": "https://go.dev/issue/76364"}, {"url": "https://pkg.go.dev/vuln/GO-2025-4135"}], "descriptions": [{"lang": "en", "value": "SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-237"}]}], "providerMetadata": {"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "shortName": "Go", "dateUpdated": "2025-11-20T17:15:00.344Z"}}}, "cveMetadata": {"cveId": "CVE-2025-47914", "state": "PUBLISHED", "dateUpdated": "2025-11-20T17:15:00.344Z", "dateReserved": "2025-05-13T23:31:29.597Z", "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc", "datePublished": "2025-11-19T20:33:43.126Z", "assignerShortName": "Go"}, "dataVersion": "5.2"}