SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade cockpit-podmanUpgrade slirp4netnsUpgrade buildah-testsUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade buildahUpgrade podman-remoteUpgrade netavarkUpgrade gvisor-tap-vsockUpgrade toolbox-testsUpgrade criuUpgrade aardvark-dnsUpgrade podman-gvproxyUpgrade podman-dockerUpgrade containers-commonUpgrade runcUpgrade container-selinuxUpgrade criu-develUpgrade libslirpUpgrade podmanUpgrade podman-pluginsUpgrade udicaUpgrade python3-podmanUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade crunUpgrade skopeo-testsUpgrade toolboxUpgrade conmonUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade python3-criuUpgrade criu-libsUpgrade skopeoUpgrade libslirp-devel | Apr 16, 2025 | Feb 26, 2025 |
| Alpine Linux | — | Upgrade rclone | Aug 8, 2025 | Feb 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade runfinch-finchUpgrade amazon-ssm-agentUpgrade docker-debuginfoUpgrade docker | Apr 2, 2025 | Feb 26, 2025 |
| Amazon_linux_2023 | — | Upgrade dockerUpgrade amazon-ssm-agentUpgrade docker-debuginfoUpgrade docker-debugsourceUpgrade runfinch-finch | Apr 2, 2025 | Feb 26, 2025 |
| Debian | — | No solution exists | May 15, 2025 | Feb 26, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Oracle_linux | — | Upgrade udicaUpgrade criuUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade criu-develUpgrade aardvark-dnsUpgrade skopeoUpgrade podman-pluginsUpgrade gvisor-tap-vsock-gvforwarderUpgrade python3-criuUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade podmanUpgrade critUpgrade runcUpgrade fuse-overlayfsUpgrade containers-commonUpgrade crunUpgrade python3-podmanUpgrade buildah-testsUpgrade libslirp-develUpgrade conmonUpgrade slirp4netnsUpgrade criu-libsUpgrade podman-testsUpgrade podman-gvproxyUpgrade libslirpUpgrade netavarkUpgrade buildahUpgrade podman-dockerUpgrade gvisor-tap-vsockUpgrade cockpit-podmanUpgrade container-selinux | Mar 27, 2025 | Feb 26, 2025 |
| Redhat Openshift | — | Upgrade ose-ibmcloud-cluster-api-controllers-rhel8Upgrade ose-ibmcloud-cluster-api-controllers-rhel9 | Aug 10, 2026 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade skopeo-testsUpgrade podman-debuginfoUpgrade slirp4netns-debugsourceUpgrade udicaUpgrade podman-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade libslirp-debugsourceUpgrade criu-develUpgrade podman-testsUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade libslirp-develUpgrade oci-seccomp-bpf-hookUpgrade buildah-testsUpgrade libslirp-debuginfoUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade criu-libsUpgrade aardvark-dnsUpgrade crun-debuginfoUpgrade toolbox-debuginfoUpgrade libslirpUpgrade cockpit-podmanUpgrade runc-debugsourceUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade podman-dockerUpgrade podman-remote-debuginfoUpgrade toolboxUpgrade skopeoUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade conmonUpgrade containernetworking-pluginsUpgrade podman-tests-debuginfoUpgrade gvisor-tap-vsock-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-catatonitUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade containers-commonUpgrade crunUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade gvisor-tap-vsockUpgrade buildah-debuginfoUpgrade criuUpgrade python3-podmanUpgrade podmanUpgrade podman-catatonit-debuginfo | Mar 27, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade podman-plugins-debuginfoUpgrade podman-tests-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade gvisor-tap-vsock-debugsourceUpgrade criu-libs-debuginfoUpgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade buildahUpgrade toolbox-debugsourceUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade gvisor-tap-vsockUpgrade buildah-tests-debuginfoUpgrade buildah-testsUpgrade podman-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade toolbox-debuginfoUpgrade aardvark-dnsUpgrade podman-remoteUpgrade criu-libsUpgrade toolbox-testsUpgrade runc-debugsourceUpgrade containernetworking-pluginsUpgrade criu-debugsourceUpgrade python3-criuUpgrade runcUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade runc-debuginfoUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade criu-develUpgrade criuUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade crunUpgrade skopeoUpgrade podman-pluginsUpgrade gvisor-tap-vsock-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade netavarkUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-testsUpgrade podman-catatonitUpgrade libslirp | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Enterprise to version 9.1.10 | Sep 30, 2025 | Feb 26, 2025 |
| Suse | — | Upgrade gitea-tea-zsh-completionUpgrade podmanUpgrade podmanshUpgrade warewulf4-reference-docUpgrade git-bug-bash-completionUpgrade podman-dockerUpgrade rekorUpgrade cosignUpgrade podman-remoteUpgrade docker-buildxUpgrade git-bug-zsh-completionUpgrade docker-rootless-extrasUpgrade apptainerUpgrade docker-stable-bash-completionUpgrade git-bugUpgrade apptainer-sle15_6Upgrade docker-fish-completionUpgrade docker-stable-buildxUpgrade warewulf4-overlayUpgrade gitea-tea-bash-completionUpgrade docker-stableUpgrade docker-stable-zsh-completionUpgrade docker-zsh-completionUpgrade docker-bash-completionUpgrade apptainer-leapUpgrade dockerUpgrade warewulf4Upgrade warewulf4-overlay-slurmUpgrade cosign-bash-completionUpgrade git-bug-fish-completionUpgrade warewulf4-dracutUpgrade rcloneUpgrade gitea-teaUpgrade rclone-bash-completionUpgrade cosign-zsh-completionUpgrade govulncheck-vulndbUpgrade docker-stable-rootless-extrasUpgrade warewulf4-manUpgrade apptainer-sle15_5Upgrade rclone-zsh-completionUpgrade buildahUpgrade docker-stable-fish-completion | Mar 4, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade golang-go.crypto-dev (Ubuntu Pro)Upgrade golang-golang-x-crypto-devUpgrade golang-golang-x-crypto-dev (Ubuntu Pro) | Jul 9, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub