# CVE-2020-29652: golang-golang-x-crypto-dev: A nil pointer dereference in the golang.org/x/crypto/ssh component throughv0.0.0-20201203163018-be400aefbc4c for Go a...

CVE-2020-29652 is fixed in 28 products on 1 platform, first by golang-golang-x-crypto-dev 1:0.0~git20201221.eec23a3-1, released December 16, 2020. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2020-29652
- Priority: High
- CVSS: 7.5 (Medium)
- EPSS: 0.0318
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 16, 2020

## Description

A nil pointer dereference in the golang.org/x/crypto/ssh component throughv0.0.0-20201203163018-be400aefbc4c for Go allows remote attackers to causea denial of service against SSH servers.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | buildah RHEL 8 | 0:1.19.7-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | buildah ol 8 | 0:1.19.7-1.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | buildah-tests RHEL 8 | 0:1.19.7-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | buildah-tests ol 8 | 0:1.19.7-1.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | cockpit-podman RHEL 8 | 0:29-2.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | cockpit-podman ol 8 | 0:29-2.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | conmon RHEL 8 | 2:2.0.26-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | conmon ol 8 | 2:2.0.26-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | container-selinux RHEL 8 | 2:2.158.0-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | container-selinux ol 8 | 2:2.158.0-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | containernetworking-plugins RHEL 8 | 0:0.9.1-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | containernetworking-plugins ol 8 | 0:0.9.1-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | containers-common RHEL 8 | 1:1.2.2-8.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | containers-common ol 8 | 1:1.2.2-8.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | crit RHEL 8 | 0:3.15-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | crit ol 8 | 0:3.15-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | criu RHEL 8 | 0:3.15-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | criu ol 8 | 0:3.15-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | crun RHEL 8 | 0:0.18-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | crun ol 8 | 0:0.18-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | fuse-overlayfs RHEL 8 | 0:1.4.0-2.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | fuse-overlayfs ol 8 | 0:1.4.0-2.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | golang-golang-x-crypto-dev Ubuntu 22.04.1 LTS (jammy) | 1:0.0~git20201221.eec23a3-1 | [golang-golang-x-crypto-dev 1:0.0~git20201221.eec23a3-1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-golang-golang-x-crypto-dev-1-0.0-git20201221.eec23a3-1.md) | Dec 16, 2020 |
| Linux | golang-golang-x-crypto-dev Ubuntu 24.10 (oracular) | 1:0.0~git20201221.eec23a3-1 | [golang-golang-x-crypto-dev 1:0.0~git20201221.eec23a3-1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-golang-golang-x-crypto-dev-1-0.0-git20201221.eec23a3-1.md) | Jan 16, 2026 |
| Linux | golang-golang-x-crypto-dev Ubuntu 25.04 (plucky) | 1:0.0~git20201221.eec23a3-1 | [golang-golang-x-crypto-dev 1:0.0~git20201221.eec23a3-1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-golang-golang-x-crypto-dev-1-0.0-git20201221.eec23a3-1.md) | Jan 16, 2026 |
| Linux | libslirp RHEL 8 | 0:4.3.1-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | libslirp ol 8 | 0:4.3.1-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | libslirp-devel RHEL 8 | 0:4.3.1-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | libslirp-devel ol 8 | 0:4.3.1-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | oci-seccomp-bpf-hook RHEL 8 | 0:1.2.0-2.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | oci-seccomp-bpf-hook ol 8 | 0:1.2.0-2.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-catatonit RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-catatonit ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-docker RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-docker ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-plugins RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-plugins ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-remote RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-remote ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | podman-tests RHEL 8 | 0:3.0.1-6.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | podman-tests ol 8 | 0:3.0.1-6.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | python3-criu RHEL 8 | 0:3.15-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | python3-criu ol 8 | 0:3.15-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | runc RHEL 8 | 0:1.0.0-70.rc92.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | runc ol 8 | 0:1.0.0-70.rc92.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | skopeo RHEL 8 | 1:1.2.2-8.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | skopeo ol 8 | 1:1.2.2-8.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | skopeo-tests RHEL 8 | 1:1.2.2-8.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | skopeo-tests ol 8 | 1:1.2.2-8.0.1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | slirp4netns RHEL 8 | 0:1.1.8-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | slirp4netns ol 8 | 0:1.1.8-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |
| Linux | toolbox RHEL 8 | 0:0.0.8-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | udica RHEL 8 | 0:0.2.4-1.module+el8.4.0+10607+f4da7515 | [RHSA-2021:1796](https://patchblox.com/security/data/fix/linux/rhsa-2021-1796.md) | May 18, 2021 |
| Linux | udica ol 8 | 0:0.2.4-1.module+el8.4.0+20157+b6591bfb | [ELSA-2021-1796](https://patchblox.com/security/data/fix/linux/elsa-2021-1796.md) | May 25, 2021 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.