GOCVEs & Vulnerabilities

SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.