CVE-2021-43565: Golang SSH DoS Vulnerability

CVE-2021-43565 Overview

CVE-2021-43565 is a denial of service vulnerability affecting the x/crypto/ssh package in the golang.org/x/crypto module. The vulnerability allows an unauthenticated attacker to trigger a panic condition on SSH servers using the affected library, effectively causing a denial of service. The flaw exists in versions prior to 0.0.0-20211202192323-5770296d904e.

Critical Impact

Remote attackers can crash SSH servers without authentication, causing service disruption and potential cascading failures in dependent systems.

Affected Products

• Golang SSH (golang.org/x/crypto/ssh) versions before 0.0.0-20211202192323-5770296d904e

Discovery Timeline

• 2022-09-06 - CVE-2021-43565 published to NVD
• 2024-11-21 - Last updated in NVD database

Technical Details for CVE-2021-43565

Vulnerability Analysis

This vulnerability enables remote denial of service attacks against applications using the Golang x/crypto/ssh package for SSH server functionality. An attacker can send specially crafted network requests to trigger a panic condition within the SSH server implementation. When the panic occurs, the entire server process terminates unexpectedly, disrupting service availability.

The attack requires no authentication and can be executed remotely over the network. Since SSH servers are typically exposed to network access by design, this significantly increases the attack surface. Applications that rely on continuous SSH connectivity—such as remote administration tools, automated deployment systems, or secure tunneling solutions—are particularly vulnerable to the disruption caused by this flaw.

Root Cause

The root cause lies in improper handling of certain input conditions within the x/crypto/ssh package. The library fails to properly validate or handle specific data that can cause the Go runtime to panic. This represents an input validation error where edge cases or malformed data are not gracefully processed, leading to unrecoverable runtime errors instead of proper error handling.

Attack Vector

The attack is executed over the network targeting SSH servers built with the vulnerable Golang x/crypto/ssh package. The attacker initiates a connection to the SSH server and sends specifically crafted packets designed to trigger the panic condition. Since the attack does not require prior authentication, any network-accessible SSH server using the vulnerable library is at risk.

The exploitation mechanism involves sending malformed or unexpected data during the SSH protocol handshake or session establishment phase, causing the server to enter an unhandled state that triggers a Go panic. This crash terminates the server process, requiring a restart to restore service.

Detection Methods for CVE-2021-43565

Indicators of Compromise

• Unexpected SSH server process terminations or crashes in application logs
• Go panic stack traces referencing golang.org/x/crypto/ssh package functions
• Increased frequency of SSH service restarts without corresponding system events
• Network traffic anomalies targeting SSH ports with unusual packet structures

Detection Strategies

• Monitor application logs for Go runtime panic messages related to the SSH package
• Implement process monitoring to detect unexpected termination of SSH server processes
• Deploy network intrusion detection rules to identify malformed SSH handshake attempts
• Use dependency scanning tools to identify applications using vulnerable x/crypto/ssh versions

Monitoring Recommendations

• Configure alerting for SSH server process crashes and automatic restart events
• Review Go application logs for panic traces containing crypto/ssh references
• Implement uptime monitoring for critical SSH-based services with rapid notification
• Track dependency versions across projects using software composition analysis (SCA) tools

How to Mitigate CVE-2021-43565

Immediate Actions Required

• Update the golang.org/x/crypto module to version 0.0.0-20211202192323-5770296d904e or later
• Audit all Go projects for dependencies on the vulnerable x/crypto/ssh package
• Rebuild and redeploy applications that use the affected library with the patched version
• Implement network segmentation to limit exposure of SSH servers to trusted networks only

Patch Information

The vulnerability is addressed in golang.org/x/crypto version 0.0.0-20211202192323-5770296d904e and all subsequent releases. Organizations should update their Go module dependencies by running go get -u golang.org/x/crypto@latest or by specifying the minimum safe version in their go.mod file. After updating dependencies, applications must be rebuilt and redeployed to incorporate the fix.

Additional information is available through the GoLang Announcement Discussion and the GoLang Announcements Forum.

Workarounds

• Restrict network access to SSH servers using firewalls or access control lists
• Deploy reverse proxies or load balancers with connection rate limiting in front of SSH services
• Implement process supervision to automatically restart crashed SSH server processes
• Consider temporarily disabling SSH server functionality until patching is complete for non-critical applications

# Update Go module dependencies to patched version
go get -u golang.org/x/crypto@v0.0.0-20211202192323-5770296d904e
go mod tidy

# Verify the updated dependency version
go list -m golang.org/x/crypto