SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade crunUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade runcUpgrade container-selinuxUpgrade conmonUpgrade criu-libsUpgrade python3-podmanUpgrade criu-develUpgrade libslirp-develUpgrade containers-commonUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade skopeoUpgrade toolboxUpgrade udicaUpgrade critUpgrade podmanUpgrade podman-pluginsUpgrade gvisor-tap-vsockUpgrade netavarkUpgrade criuUpgrade podman-catatonitUpgrade podman-remoteUpgrade cockpit-podmanUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade toolbox-testsUpgrade podman-dockerUpgrade buildahUpgrade podman-gvproxyUpgrade buildah-testsUpgrade slirp4netns | Apr 16, 2025 | Feb 26, 2025 |
| Alpine Linux | — | Upgrade rclone | Aug 8, 2025 | Feb 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade runfinch-finchUpgrade docker-debuginfoUpgrade amazon-ssm-agent | Apr 2, 2025 | Feb 26, 2025 |
| Amazon_linux_2023 | — | Upgrade runfinch-finchUpgrade docker-debugsourceUpgrade docker-debuginfoUpgrade amazon-ssm-agentUpgrade docker | Apr 2, 2025 | Feb 26, 2025 |
| Debian | — | No solution exists | May 15, 2025 | Feb 26, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade podman-dockerUpgrade crunUpgrade slirp4netnsUpgrade podman-testsUpgrade conmonUpgrade buildah-testsUpgrade gvisor-tap-vsockUpgrade criu-libsUpgrade libslirp-develUpgrade python3-podmanUpgrade libslirpUpgrade cockpit-podmanUpgrade buildahUpgrade netavarkUpgrade podman-gvproxyUpgrade podmanUpgrade fuse-overlayfsUpgrade udicaUpgrade podman-pluginsUpgrade python3-criuUpgrade podman-catatonitUpgrade criuUpgrade containers-commonUpgrade critUpgrade skopeoUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade gvisor-tap-vsock-gvforwarderUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade runcUpgrade aardvark-dns | Mar 27, 2025 | Feb 26, 2025 |
| Redhat Openshift | — | Upgrade ose-ibmcloud-cluster-api-controllers-rhel9Upgrade ose-ibmcloud-cluster-api-controllers-rhel8 | Aug 10, 2026 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade runc-debugsourceUpgrade skopeo-testsUpgrade toolbox-debuginfoUpgrade slirp4netns-debugsourceUpgrade udicaUpgrade container-selinuxUpgrade podman-debuginfoUpgrade criu-develUpgrade podman-gvproxyUpgrade containernetworking-plugins-debuginfoUpgrade critUpgrade criu-libsUpgrade podman-dockerUpgrade podman-remoteUpgrade conmon-debuginfoUpgrade criu-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade podman-testsUpgrade runc-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade slirp4netns-debuginfoUpgrade libslirpUpgrade cockpit-podmanUpgrade crun-debuginfoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade libslirp-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade podman-plugins-debuginfoUpgrade python3-criuUpgrade aardvark-dnsUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-testsUpgrade gvisor-tap-vsockUpgrade crunUpgrade containers-commonUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmon-debugsourceUpgrade conmonUpgrade python3-podmanUpgrade buildahUpgrade criuUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade podman-pluginsUpgrade buildah-debuginfoUpgrade toolboxUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade skopeoUpgrade podman-catatonitUpgrade netavarkUpgrade podman-tests-debuginfoUpgrade buildah-tests-debuginfoUpgrade gvisor-tap-vsock-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade toolbox-debugsource | Mar 27, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade criu-libsUpgrade toolbox-testsUpgrade containers-commonUpgrade runc-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade python3-criuUpgrade criu-libs-debuginfoUpgrade conmon-debuginfoUpgrade crun-debugsourceUpgrade slirp4netnsUpgrade criu-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade podman-gvproxyUpgrade libslirp-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-debuginfoUpgrade gvisor-tap-vsockUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade runcUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade containernetworking-pluginsUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debugsourceUpgrade crun-debuginfoUpgrade buildah-debuginfoUpgrade buildah-testsUpgrade podman-tests-debuginfoUpgrade critUpgrade runc-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-testsUpgrade criu-develUpgrade gvisor-tap-vsock-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade podman-pluginsUpgrade crunUpgrade conmonUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade containernetworking-plugins-debugsourceUpgrade libslirp-develUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade criuUpgrade conmon-debugsourceUpgrade slirp4netns-debugsourceUpgrade podmanUpgrade libslirp-debugsourceUpgrade podman-catatonit-debuginfoUpgrade skopeo-testsUpgrade netavarkUpgrade skopeo | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.4.3 | Sep 30, 2025 | Feb 26, 2025 |
| Suse | — | Upgrade docker-rootless-extrasUpgrade docker-stableUpgrade gitea-tea-bash-completionUpgrade git-bug-bash-completionUpgrade git-bug-zsh-completionUpgrade gitea-tea-zsh-completionUpgrade podmanUpgrade apptainerUpgrade podman-dockerUpgrade warewulf4-reference-docUpgrade podmanshUpgrade apptainer-sle15_6Upgrade podman-remoteUpgrade rekorUpgrade docker-fish-completionUpgrade cosignUpgrade git-bugUpgrade docker-stable-buildxUpgrade docker-stable-bash-completionUpgrade docker-zsh-completionUpgrade docker-stable-zsh-completionUpgrade warewulf4-overlayUpgrade docker-buildxUpgrade warewulf4Upgrade rclone-bash-completionUpgrade docker-stable-fish-completionUpgrade dockerUpgrade git-bug-fish-completionUpgrade apptainer-leapUpgrade cosign-zsh-completionUpgrade govulncheck-vulndbUpgrade gitea-teaUpgrade docker-stable-rootless-extrasUpgrade rclone-zsh-completionUpgrade docker-bash-completionUpgrade apptainer-sle15_5Upgrade warewulf4-manUpgrade buildahUpgrade rcloneUpgrade warewulf4-overlay-slurmUpgrade warewulf4-dracutUpgrade cosign-bash-completion | Mar 4, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade golang-go.crypto-dev (Ubuntu Pro)Upgrade golang-golang-x-crypto-devUpgrade golang-golang-x-crypto-dev (Ubuntu Pro) | Jul 9, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub