CVE-2026-39835 - SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil. - 漏洞详情

漏洞编号：CVE-2026-39835

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-39835

CNNVD 编号：-

厂商/产品：golang / crypto

影响范围：cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*

CWE：CWE-295

发布/更新时间：2026-05-22 / 2026-08-28

漏洞描述

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

CVE-2026-39835 - SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil. - 漏洞详情

漏洞描述

相关链接

相关漏洞