SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade skopeoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hookUpgrade python3-criuUpgrade crunUpgrade runcUpgrade skopeo-testsUpgrade libslirpUpgrade conmonUpgrade critUpgrade podman-testsUpgrade python3-podmanUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade podmanUpgrade toolboxUpgrade libslirp-develUpgrade udicaUpgrade podman-pluginsUpgrade criu-develUpgrade criu-libsUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade gvisor-tap-vsockUpgrade slirp4netnsUpgrade buildahUpgrade podman-dockerUpgrade podman-catatonitUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade buildah-testsUpgrade criuUpgrade netavark | Apr 16, 2025 | Feb 26, 2025 |
| Alpine Linux | — | Upgrade rclone | Aug 8, 2025 | Feb 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade amazon-ssm-agentUpgrade runfinch-finchUpgrade docker-debuginfo | Apr 2, 2025 | Feb 26, 2025 |
| Amazon_linux_2023 | — | Upgrade runfinch-finchUpgrade docker-debugsourceUpgrade docker-debuginfoUpgrade amazon-ssm-agentUpgrade docker | Apr 2, 2025 | Feb 26, 2025 |
| Debian | — | No solution exists | May 15, 2025 | Feb 26, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Oracle_linux | — | Upgrade slirp4netnsUpgrade crunUpgrade netavarkUpgrade libslirp-develUpgrade buildah-testsUpgrade conmonUpgrade container-selinuxUpgrade cockpit-podmanUpgrade buildahUpgrade libslirpUpgrade gvisor-tap-vsockUpgrade podman-dockerUpgrade python3-podmanUpgrade criu-libsUpgrade podman-gvproxyUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade podman-pluginsUpgrade criu-develUpgrade criuUpgrade python3-criuUpgrade gvisor-tap-vsock-gvforwarderUpgrade podman-catatonitUpgrade udicaUpgrade skopeo-testsUpgrade critUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade containers-commonUpgrade runcUpgrade skopeo | Mar 27, 2025 | Feb 26, 2025 |
| Redhat Openshift | — | Upgrade ose-ibmcloud-cluster-api-controllers-rhel8Upgrade ose-ibmcloud-cluster-api-controllers-rhel9 | Aug 10, 2026 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade fuse-overlayfs-debugsourceUpgrade podman-remote-debuginfoUpgrade buildahUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade python3-podmanUpgrade toolbox-debugsourceUpgrade podmanUpgrade podman-pluginsUpgrade buildah-tests-debuginfoUpgrade criu-debuginfoUpgrade toolboxUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade podman-catatonitUpgrade podman-tests-debuginfoUpgrade skopeoUpgrade gvisor-tap-vsock-debuginfoUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade conmonUpgrade podman-catatonit-debuginfoUpgrade crunUpgrade toolbox-testsUpgrade gvisor-tap-vsockUpgrade podman-gvproxyUpgrade container-selinuxUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade udicaUpgrade podman-debuginfoUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade criu-develUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-debugsourceUpgrade runcUpgrade gvisor-tap-vsock-gvforwarderUpgrade podman-debugsourceUpgrade libslirp-debugsourceUpgrade runc-debuginfoUpgrade conmon-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade podman-testsUpgrade slirp4netns-debuginfoUpgrade podman-remoteUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade criu-libsUpgrade python3-criuUpgrade podman-dockerUpgrade cockpit-podmanUpgrade buildah-testsUpgrade crun-debuginfoUpgrade libslirpUpgrade critUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfo | Mar 27, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade gvisor-tap-vsock-debuginfoUpgrade crunUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade skopeoUpgrade podman-pluginsUpgrade podman-testsUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade slirp4netns-debugsourceUpgrade conmon-debugsourceUpgrade criuUpgrade libslirpUpgrade toolboxUpgrade runc-debuginfoUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-debugsourceUpgrade conmonUpgrade podman-remote-debuginfoUpgrade podmanUpgrade podman-catatonitUpgrade python3-criuUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade gvisor-tap-vsock-debugsourceUpgrade critUpgrade podman-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade toolbox-debuginfoUpgrade buildah-debuginfoUpgrade toolbox-debugsourceUpgrade podman-debugsourceUpgrade containernetworking-pluginsUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade gvisor-tap-vsockUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade podman-remoteUpgrade toolbox-testsUpgrade criu-libsUpgrade containers-commonUpgrade runc-debugsource | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.2.7 | Sep 30, 2025 | Feb 26, 2025 |
| Suse | — | Upgrade gitea-tea-zsh-completionUpgrade docker-fish-completionUpgrade git-bug-zsh-completionUpgrade docker-stable-buildxUpgrade podmanUpgrade warewulf4-reference-docUpgrade cosignUpgrade warewulf4-overlayUpgrade docker-stable-bash-completionUpgrade git-bugUpgrade podmanshUpgrade gitea-tea-bash-completionUpgrade apptainer-sle15_6Upgrade docker-rootless-extrasUpgrade docker-stable-zsh-completionUpgrade git-bug-bash-completionUpgrade docker-buildxUpgrade rekorUpgrade docker-stableUpgrade podman-dockerUpgrade podman-remoteUpgrade docker-zsh-completionUpgrade apptainerUpgrade buildahUpgrade warewulf4-dracutUpgrade cosign-zsh-completionUpgrade rclone-bash-completionUpgrade rclone-zsh-completionUpgrade cosign-bash-completionUpgrade rcloneUpgrade docker-stable-fish-completionUpgrade apptainer-sle15_5Upgrade warewulf4-manUpgrade git-bug-fish-completionUpgrade docker-bash-completionUpgrade apptainer-leapUpgrade warewulf4-overlay-slurmUpgrade govulncheck-vulndbUpgrade docker-stable-rootless-extrasUpgrade dockerUpgrade warewulf4Upgrade gitea-tea | Mar 4, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade golang-go.crypto-dev (Ubuntu Pro)Upgrade golang-golang-x-crypto-devUpgrade golang-golang-x-crypto-dev (Ubuntu Pro) | Jul 9, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub