CVE-2025-47913: Potential denial of service in golang.org/x/crypto/ssh/agent
Potential denial of service in golang.org/x/crypto/ssh/agent
Other sources
SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
go/golang.org/x/crypto/ssh/agentto a version that resolves this vulnerability.Fixed in 0.43.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47913?
CVE-2025-47913 is considered a high severity vulnerability due to the potential for client process termination.
How do I fix CVE-2025-47913?
To mitigate CVE-2025-47913, upgrade to the latest version of Golang x/crypto/ssh/agent where the issue has been resolved.
What systems are affected by CVE-2025-47913?
CVE-2025-47913 affects SSH clients utilizing Golang's x/crypto/ssh/agent for handling agent responses.
What impact does CVE-2025-47913 have on users?
Users of affected SSH clients may experience unexpected client crashes due to the vulnerability.
Is there a workaround for CVE-2025-47913?
Currently, the recommended solution is to update the affected software, as no workaround is provided.