CVE-2017-3204

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

The Go SSH library (x/crypto/ssh) by default does not verify host keys, facilitating man-in-the-middle attacks. Default behavior changed in commit e4e2799 to require explicitly registering a hostkey verification mechanism.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-310

Affected software

Vendor	Product	Versions
Go	SSH library	prior to commit e4e2799

References

http://www.securityfocus.com/bid/97481Third Party Advisory, VDB Entry
https://bridge.grumpy-troll.org/2017/04/golang-ssh-security/Third Party Advisory
https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991Patch, Third Party Advisory
https://github.com/golang/go/issues/19767Third Party Advisory
https://godoc.org/golang.org/x/crypto/sshVendor Advisory
http://www.securityfocus.com/bid/97481Third Party Advisory, VDB Entry
https://bridge.grumpy-troll.org/2017/04/golang-ssh-security/Third Party Advisory
https://github.com/golang/crypto/commit/e4e2799dd7aab89f583e1d898300d96367750991Patch, Third Party Advisory
https://github.com/golang/go/issues/19767Third Party Advisory
https://godoc.org/golang.org/x/crypto/sshVendor Advisory

Timeline

Published: Apr 4, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-32069.8The Java implementation of AMF3 deserializers used by Flamingo amf-serializer by Exadel, version 2.2.0, allows external entity references (X CVE-2017-32079.8The Java implementations of AMF3 deserializers in WebORB for Java by Midnight Coders, version 5.1.1.0, derive class instances from java.io.E CVE-2017-32089.8The Java implementation of AMF3 deserializers used by WebORB for Java by Midnight Coders, version 5.1.1.0, allows external entity references CVE-2017-32098.1The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymo CVE-2017-32107.8Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary CVE-2017-32115.3Yopify, an e-commerce notification plugin, up to April 06, 2017, leaks the first name, last initial, city, and recent purchase data of custo CVE-2017-32125.9The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.0.1104 for Android does not verify X.509 certificates from SSL servers, which al CVE-2017-32135.9The Think Mutual Bank Mobile Banking app 3.1.5 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle a CVE-2017-32147.5The Milwaukee ONE-KEY Android mobile application stores the master token in plaintext in the apk binary.CVE-2017-32155.3The Milwaukee ONE-KEY Android mobile application uses bearer tokens with an expiration of one year. This bearer token, in combination with a CVE-2017-32169.8WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote CVE-2017-32178.1CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SMS (text message) interface that can be deployed where no password is configured