CVE:CVE-2022-27191
CNNVD:CNNVD-202203-1791
Golang Go crypto是Golang社区的一款基于 Go 语言的加密代码库。
Golang Go crypto 1.16.15之前版本和1.17.x到1.17.8版本存在加密问题漏洞，该漏洞源于golang.org/x/crypto/ssh  0.0.0-20220314234659-1baeb1ce4c0b之前版本在AddHostKey相关的某些情况下会使得服务器崩溃。
solution:Upgrade golang ssh to a higher version than 0.0.0-20220314234659-1baeb1ce4c0b,and avoid the version (,0.0.0-20220314234659-1baeb1ce4c0b); Upgrade fedoraproject extra_packages_for_enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade fedoraproject fedora to a higher version than 34,35,36,and avoid the version 34,35,36; Upgrade redhat advanced_cluster_management_for_kubernetes to a higher version than 2.0,and avoid the version 2.0