CVE-2024-39223

—

CVSS 3.1

9.8 critical

EPSS

<1%p51

Published

Jul 3, 2024 (Jul 3, 2024)

Modified

Jun 17, 2026

Description

An authentication bypass in the SSH service of gost v2.11.5 allows attackers to intercept communications via setting the HostKeyCallback function to ssh.InsecureIgnoreHostKey

Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.