SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade etcd | Apr 29, 2026 | Nov 19, 2025 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade nerdctl-debuginfoUpgrade docker-debuginfoUpgrade containerd-debuginfoUpgrade dockerUpgrade amazon-cloudwatch-agentUpgrade runfinch-finchUpgrade containerd-stressUpgrade nerdctl | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade dockerUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade runfinch-finchUpgrade docker-debugsource | Jan 12, 2026 | Nov 19, 2025 |
| Freebsd | — | Upgrade oauth2-proxy | Jan 27, 2026 | Jan 18, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 19, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.7Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 9.4.12Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.4.9Upgrade Splunk Enterprise to version 9.3.13Upgrade Splunk Enterprise to version 10.4.0Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.4 | Jul 30, 2026 | Nov 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub