SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade runcUpgrade podman-pluginsUpgrade libslirpUpgrade criu-develUpgrade udicaUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade toolboxUpgrade libslirp-develUpgrade podmanUpgrade crunUpgrade skopeo-testsUpgrade containers-commonUpgrade critUpgrade containernetworking-pluginsUpgrade python3-podmanUpgrade criu-libsUpgrade python3-criuUpgrade skopeoUpgrade podman-testsUpgrade fuse-overlayfsUpgrade aardvark-dnsUpgrade podman-remoteUpgrade netavarkUpgrade podman-catatonitUpgrade buildahUpgrade cockpit-podmanUpgrade toolbox-testsUpgrade podman-gvproxyUpgrade slirp4netnsUpgrade gvisor-tap-vsockUpgrade criuUpgrade podman-dockerUpgrade buildah-tests | Apr 16, 2025 | Feb 26, 2025 |
| Alpine Linux | — | Upgrade rclone | Aug 8, 2025 | Feb 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade docker-debuginfoUpgrade runfinch-finchUpgrade amazon-ssm-agentUpgrade docker | Apr 2, 2025 | Feb 26, 2025 |
| Amazon_linux_2023 | — | Upgrade docker-debuginfoUpgrade dockerUpgrade amazon-ssm-agentUpgrade runfinch-finchUpgrade docker-debugsource | Apr 2, 2025 | Feb 26, 2025 |
| Debian | — | No solution exists | May 15, 2025 | Feb 26, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Oracle_linux | — | Upgrade conmonUpgrade buildahUpgrade buildah-testsUpgrade slirp4netnsUpgrade netavarkUpgrade libslirp-develUpgrade container-selinuxUpgrade cockpit-podmanUpgrade criu-libsUpgrade crunUpgrade python3-podmanUpgrade gvisor-tap-vsockUpgrade podman-testsUpgrade libslirpUpgrade podman-gvproxyUpgrade podman-dockerUpgrade containers-commonUpgrade runcUpgrade aardvark-dnsUpgrade podman-pluginsUpgrade skopeoUpgrade python3-criuUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade skopeo-testsUpgrade critUpgrade podmanUpgrade udicaUpgrade gvisor-tap-vsock-gvforwarderUpgrade podman-catatonitUpgrade criu-develUpgrade criu | Mar 27, 2025 | Feb 26, 2025 |
| Redhat Openshift | — | Upgrade ose-ibmcloud-cluster-api-controllers-rhel8Upgrade ose-ibmcloud-cluster-api-controllers-rhel9 | Aug 10, 2026 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade cockpit-podmanUpgrade crun-debuginfoUpgrade libslirpUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade containernetworking-plugins-debuginfoUpgrade criu-libsUpgrade podman-dockerUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade podman-plugins-debuginfoUpgrade buildah-testsUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade container-selinuxUpgrade criu-develUpgrade podman-gvproxyUpgrade slirp4netns-debugsourceUpgrade udicaUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hookUpgrade critUpgrade libslirp-debugsourceUpgrade toolbox-debuginfoUpgrade slirp4netnsUpgrade conmon-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade gvisor-tap-vsock-gvforwarderUpgrade podman-remoteUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade podman-testsUpgrade criu-debugsourceUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade crunUpgrade criu-debuginfoUpgrade podman-pluginsUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade buildahUpgrade containernetworking-pluginsUpgrade conmon-debugsourceUpgrade buildah-debugsourceUpgrade criuUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade podman-remote-debuginfoUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade podmanUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade podman-tests-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade gvisor-tap-vsock-debuginfoUpgrade netavarkUpgrade skopeoUpgrade podman-catatonitUpgrade containers-commonUpgrade gvisor-tap-vsock | Mar 27, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade buildah-tests-debuginfoUpgrade crun-debugsourceUpgrade gvisor-tap-vsockUpgrade podman-debuginfoUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade podman-plugins-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade critUpgrade crun-debuginfoUpgrade buildah-testsUpgrade runcUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade podman-tests-debuginfoUpgrade runc-debugsourceUpgrade podman-remoteUpgrade containernetworking-pluginsUpgrade criu-libs-debuginfoUpgrade slirp4netnsUpgrade toolbox-testsUpgrade containers-commonUpgrade criu-libsUpgrade gvisor-tap-vsock-debugsourceUpgrade toolbox-debugsourceUpgrade buildah-debuginfoUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade conmon-debuginfoUpgrade buildahUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debuginfoUpgrade python3-criuUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-pluginsUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade slirp4netns-debugsourceUpgrade skopeo-testsUpgrade netavarkUpgrade criuUpgrade conmon-debugsourceUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debugsourceUpgrade conmonUpgrade toolboxUpgrade podman-testsUpgrade podman-remote-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade gvisor-tap-vsock-debuginfoUpgrade crun | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.10Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.3.5 | Sep 30, 2025 | Feb 26, 2025 |
| Suse | — | Upgrade apptainer-sle15_6Upgrade docker-stableUpgrade rekorUpgrade gitea-tea-bash-completionUpgrade podman-remoteUpgrade warewulf4-overlayUpgrade git-bugUpgrade cosignUpgrade apptainerUpgrade git-bug-bash-completionUpgrade docker-stable-bash-completionUpgrade docker-fish-completionUpgrade docker-zsh-completionUpgrade docker-buildxUpgrade docker-rootless-extrasUpgrade docker-stable-buildxUpgrade warewulf4-reference-docUpgrade git-bug-zsh-completionUpgrade gitea-tea-zsh-completionUpgrade podmanUpgrade podman-dockerUpgrade podmanshUpgrade docker-stable-zsh-completionUpgrade rclone-bash-completionUpgrade cosign-zsh-completionUpgrade docker-bash-completionUpgrade apptainer-sle15_5Upgrade warewulf4-manUpgrade buildahUpgrade warewulf4-overlay-slurmUpgrade warewulf4-dracutUpgrade rcloneUpgrade cosign-bash-completionUpgrade apptainer-leapUpgrade git-bug-fish-completionUpgrade docker-stable-fish-completionUpgrade dockerUpgrade warewulf4Upgrade govulncheck-vulndbUpgrade rclone-zsh-completionUpgrade docker-stable-rootless-extrasUpgrade gitea-tea | Mar 4, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade golang-golang-x-crypto-devUpgrade golang-go.crypto-dev (Ubuntu Pro)Upgrade golang-golang-x-crypto-dev (Ubuntu Pro) | Jul 9, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub