SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade crunUpgrade python3-criuUpgrade toolboxUpgrade podmanUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade critUpgrade conmonUpgrade skopeoUpgrade podman-testsUpgrade containers-commonUpgrade criu-libsUpgrade skopeo-testsUpgrade libslirpUpgrade runcUpgrade container-selinuxUpgrade criu-develUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade podman-gvproxyUpgrade buildah-testsUpgrade podman-dockerUpgrade criuUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade slirp4netnsUpgrade buildahUpgrade gvisor-tap-vsockUpgrade podman-remoteUpgrade netavarkUpgrade aardvark-dns | Apr 16, 2025 | Feb 26, 2025 |
| Alpine Linux | — | Upgrade rclone | Aug 8, 2025 | Feb 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade docker-debuginfoUpgrade amazon-ssm-agentUpgrade runfinch-finch | Apr 2, 2025 | Feb 26, 2025 |
| Amazon_linux_2023 | — | Upgrade docker-debuginfoUpgrade amazon-ssm-agentUpgrade dockerUpgrade docker-debugsourceUpgrade runfinch-finch | Apr 2, 2025 | Feb 26, 2025 |
| Debian | — | No solution exists | May 15, 2025 | Feb 26, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Oracle_linux | — | Upgrade gvisor-tap-vsockUpgrade podman-dockerUpgrade buildah-testsUpgrade container-selinuxUpgrade crunUpgrade slirp4netnsUpgrade podman-testsUpgrade podman-gvproxyUpgrade python3-podmanUpgrade libslirpUpgrade criu-libsUpgrade libslirp-develUpgrade conmonUpgrade cockpit-podmanUpgrade buildahUpgrade netavarkUpgrade gvisor-tap-vsock-gvforwarderUpgrade aardvark-dnsUpgrade udicaUpgrade podman-pluginsUpgrade skopeoUpgrade critUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade criuUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade criu-develUpgrade python3-criuUpgrade fuse-overlayfsUpgrade containers-commonUpgrade runcUpgrade podmanUpgrade podman-remote | Mar 27, 2025 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade podman-debugsourceUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade container-selinuxUpgrade gvisor-tap-vsock-gvforwarderUpgrade libslirp-debugsourceUpgrade podman-remoteUpgrade criu-debugsourceUpgrade podman-testsUpgrade podman-gvproxy-debuginfoUpgrade criu-develUpgrade aardvark-dnsUpgrade udicaUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade runcUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade cockpit-podmanUpgrade libslirp-develUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade libslirp-debuginfoUpgrade podman-dockerUpgrade gvisor-tap-vsock-debugsourceUpgrade runc-debugsourceUpgrade slirp4netnsUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade podman-debuginfoUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade critUpgrade podman-catatonit-debuginfoUpgrade podman-tests-debuginfoUpgrade netavarkUpgrade toolbox-debugsourceUpgrade podman-pluginsUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade python3-podmanUpgrade podmanUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade gvisor-tap-vsockUpgrade gvisor-tap-vsock-debuginfoUpgrade crunUpgrade toolbox-testsUpgrade criu-debuginfoUpgrade containers-commonUpgrade buildahUpgrade conmonUpgrade buildah-tests-debuginfoUpgrade criuUpgrade skopeoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade toolboxUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade containernetworking-plugins-debugsource | Mar 27, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade podman-gvproxy-debuginfoUpgrade podman-tests-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade criu-libs-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-debuginfoUpgrade critUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade podman-debugsourceUpgrade gvisor-tap-vsockUpgrade podman-gvproxyUpgrade gvisor-tap-vsock-debugsourceUpgrade buildah-testsUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debuginfoUpgrade toolbox-debuginfoUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade buildahUpgrade runc-debugsourceUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade python3-criuUpgrade runcUpgrade containers-commonUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade criu-libsUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade fuse-overlayfs-debuginfoUpgrade podman-pluginsUpgrade crunUpgrade skopeoUpgrade skopeo-testsUpgrade netavarkUpgrade criu-develUpgrade podman-catatonitUpgrade toolboxUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade gvisor-tap-vsock-debuginfoUpgrade podman-testsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade libslirp-debugsourceUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade criuUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade conmon-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade conmonUpgrade buildah-debugsourceUpgrade slirp4netns-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Enterprise to version 9.4.3 | Sep 30, 2025 | Feb 26, 2025 |
| Suse | — | Upgrade rekorUpgrade docker-buildxUpgrade docker-stableUpgrade gitea-tea-bash-completionUpgrade gitea-tea-zsh-completionUpgrade podmanUpgrade docker-stable-buildxUpgrade warewulf4-overlayUpgrade docker-fish-completionUpgrade cosignUpgrade podmanshUpgrade warewulf4-reference-docUpgrade docker-zsh-completionUpgrade docker-stable-zsh-completionUpgrade podman-remoteUpgrade git-bugUpgrade podman-dockerUpgrade git-bug-zsh-completionUpgrade git-bug-bash-completionUpgrade apptainerUpgrade apptainer-sle15_6Upgrade docker-rootless-extrasUpgrade docker-stable-bash-completionUpgrade buildahUpgrade gitea-teaUpgrade cosign-zsh-completionUpgrade rclone-bash-completionUpgrade warewulf4-dracutUpgrade rcloneUpgrade cosign-bash-completionUpgrade docker-bash-completionUpgrade apptainer-sle15_5Upgrade dockerUpgrade warewulf4-manUpgrade warewulf4Upgrade docker-stable-rootless-extrasUpgrade govulncheck-vulndbUpgrade rclone-zsh-completionUpgrade git-bug-fish-completionUpgrade docker-stable-fish-completionUpgrade apptainer-leapUpgrade warewulf4-overlay-slurm | Mar 4, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade golang-golang-x-crypto-dev (Ubuntu Pro)Upgrade golang-golang-x-crypto-devUpgrade golang-go.crypto-dev (Ubuntu Pro) | Jul 9, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub