Back to Database
Status published
Unknown
CVE-2025-47913
Potential denial of service in golang.org/x/crypto/ssh/agent
Vulnerability Description
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-47913
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Jakub Ciolek
- Nicola Murino
References
More from golang.org/x/crypto
View All →CVE-2025-58181
Unbounded memory consumption in golang.org/x/crypto/ssh
Unknown
0
CVE-2025-47914
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
Unknown
0
CVE-2025-22869
Potential denial of service in golang.org/x/crypto
Unknown
0
CVE-2024-45337
Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto
Unknown
0
CVE-2022-30636
Limited directory traversal vulnerability on Windows in golang.org/x/crypto
Unknown
0
Affected Vendor
golang.org/x/crypto
View all reports →Affected Software
golang.org/x/crypto/ssh/agent
Vulnerable Versions:
0
Timeline
Official Publish:
November 13th, 2025
Last Modified:
December 16th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.