CVE-2025-47914: Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
go/golang.org/x/cryptoto a version that resolves this vulnerability.Fixed in 0.45.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-47914?
CVE-2025-47914 has a high severity due to potential program panic from malformed messages.
How do I fix CVE-2025-47914?
To fix CVE-2025-47914, update affected versions of Google Go and golang.org x/crypto/ssh/agent to the latest secure release.
What software is affected by CVE-2025-47914?
CVE-2025-47914 affects Google Go and golang.org x/crypto/ssh/agent.
What kind of vulnerability is CVE-2025-47914?
CVE-2025-47914 is a message validation vulnerability in SSH Agent servers.
Can CVE-2025-47914 lead to denial of service?
Yes, CVE-2025-47914 can lead to denial of service due to program crashes from unvalidated message sizes.