Go SSH Authorization Bypass Vulnerability in golang.org/x/crypto

An authorization bypass vulnerability has been identified in the SSH implementation of the Go programming language, specifically in the golang.org/x/crypto package, prior to version 0.52.0. This vulnerability arises from a misconfiguration in the SSH server that allows certain callbacks to bypass source-address validation. As a result, the validation is skipped, creating a potential security risk.

Impact

Exploitation of this vulnerability allows for an authorization bypass, where source-address validation is incorrectly skipped, potentially leading to unauthorized actions or access.

Remediation

Users can update to version v0.52.0 of golang.org/x/crypto to address this vulnerability.