[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdo06KE9pBcpsT6BBWiorSsX9L8ZVV6tu0Cm3CzfGqhw":3,"g5a-risk:CVE-2020-9283":136},{"success":4,"data":5,"meta":134},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":53,"references":54,"referencesCount":80,"weaknesses":81,"weaknessesCount":90,"isActivelyExploited":91,"cisaInfo":26,"otxData":26,"relatedBlogPosts":92,"seoMetadata":93,"configurations":118,"relatedVendorCves":132,"notableEvents":133},"CVE-2020-9283","What is CVE-2020-9283?","golang.org\u002Fx\u002Fcrypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org\u002Fx\u002Fcrypto\u002Fssh package. A client can attack an SSH server that accepts public keys. Also, a server can attack any SSH client.","golang.org\u002Fx\u002Fcrypto before v0.0.0-20200220183623-bac4c82f6975 for Go allows a panic during signature verification in the golang.org\u002Fx\u002Fcrypto\u002Fssh package. A c...","2020-02-20T20:15:10.437","2023-11-07T03:26:50.74",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.20891,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"golang","package_ssh","0.0.0-20200220183623-bac4c82f6975","cpe:2.3:a:golang:package_ssh:0.0.0-20200220183623-bac4c82f6975:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":51,"criteria":52,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",2,[55,62,66,71,74,77],{"url":56,"source":57,"tags":58},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F156480\u002FGo-SSH-0.0.2-Denial-Of-Service.html","Packetstormsecurity",[59,60,61],"Exploit","Third Party Advisory","VDB Entry",{"url":63,"source":64,"tags":65},"https:\u002F\u002Fgroups.google.com\u002Fforum\u002F#%21topic\u002Fgolang-announce\u002F3L45YRc91SY","Google",[],{"url":67,"source":68,"tags":69},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F10\u002Fmsg00014.html","Debian",[70,60],"Mailing List",{"url":72,"source":68,"tags":73},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F11\u002Fmsg00027.html",[70,60],{"url":75,"source":68,"tags":76},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2020\u002F11\u002Fmsg00031.html",[70,60],{"url":78,"source":68,"tags":79},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F06\u002Fmsg00017.html",[],6,[82],{"id":83,"name":84,"description":85,"extendedDescription":86,"status":87,"abstraction":88,"structure":89},"CWE-347","Improper Verification of Cryptographic Signature","The product does not verify, or incorrectly verifies, the cryptographic signature for data.","","Draft","Base","Simple",1,false,[],{"title":94,"metaDescription":95,"keywords":96,"canonicalUrl":97,"structuredData":98},"What is CVE-2020-9283? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-9283, a high severity cyber security vulnerability from 2020. golang.org\u002Fx\u002Fcrypto before v0.0.0-20200220183623-bac4c82f697...","CVE-2020-9283, CVE-2020-9283 vulnerability, CVE-2020-9283 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, golang security, debian security, package_ssh vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2020-9283",{"@context":99,"@type":100,"headline":94,"description":95,"datePublished":10,"dateModified":11,"author":101,"publisher":105,"about":109,"mainEntityOfPage":113,"articleSection":116,"keywords":117},"https:\u002F\u002Fschema.org","TechArticle",{"@type":102,"name":103,"url":104},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":102,"name":103,"url":104,"logo":106},{"@type":107,"url":108},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":110,"name":6,"description":111,"additionalType":112},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":114,"@id":115},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-9283","Cybersecurity","CVE-2020-9283, CVE-2020-9283 vulnerability, CVE-2020-9283 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[119,126],{"Operator":26,"Negate":26,"Nodes":120},[121],{"Operator":122,"Negate":26,"CPEMatch":123},"OR",[124],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":125,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"D9D8FAB7-0538-45D7-8471-B4AC9467B4B5",{"Operator":26,"Negate":26,"Nodes":127},[128],{"Operator":122,"Negate":26,"CPEMatch":129},[130],{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DEECE5FC-CACF-4496-A3E7-164736409252",[],[],{"lastModified":11,"cacheTime":135,"version":32},1792329622600,{"score":137,"band":138,"action":139,"scoredAt":140},48,"Medium","Plan remediation","2026-10-16T06:47:58.523679+00:00"]