SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criu-develUpgrade containers-commonUpgrade runcUpgrade libslirpUpgrade container-selinuxUpgrade python3-criuUpgrade critUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade criu-libsUpgrade python3-podmanUpgrade toolboxUpgrade skopeoUpgrade libslirp-develUpgrade skopeo-testsUpgrade conmonUpgrade oci-seccomp-bpf-hookUpgrade podman-pluginsUpgrade crunUpgrade udicaUpgrade buildah-testsUpgrade criuUpgrade toolbox-testsUpgrade buildahUpgrade fuse-overlayfsUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade gvisor-tap-vsockUpgrade netavarkUpgrade podman-catatonitUpgrade podman-remoteUpgrade podman-gvproxyUpgrade aardvark-dnsUpgrade podman-docker | Apr 16, 2025 | Feb 26, 2025 |
| Alpine Linux | — | Upgrade rclone | Aug 8, 2025 | Feb 26, 2025 |
| Amazon Linux Ami 2 | — | Upgrade runfinch-finchUpgrade docker-debuginfoUpgrade amazon-ssm-agentUpgrade docker | Apr 2, 2025 | Feb 26, 2025 |
| Amazon_linux_2023 | — | Upgrade amazon-ssm-agentUpgrade dockerUpgrade docker-debuginfoUpgrade docker-debugsourceUpgrade runfinch-finch | Apr 2, 2025 | Feb 26, 2025 |
| Debian | — | No solution exists | May 15, 2025 | Feb 26, 2025 |
| Dell Powerstore Dsa2025342 | — | Upgrade Dell PowerStoreOS to the latest version | Oct 23, 2025 | Sep 2, 2025 |
| Oracle_linux | — | Upgrade python3-podmanUpgrade libslirpUpgrade podman-dockerUpgrade conmonUpgrade criu-libsUpgrade container-selinuxUpgrade buildah-testsUpgrade podman-gvproxyUpgrade podman-testsUpgrade slirp4netnsUpgrade crunUpgrade libslirp-develUpgrade netavarkUpgrade gvisor-tap-vsockUpgrade cockpit-podmanUpgrade buildahUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade containers-commonUpgrade runcUpgrade python3-criuUpgrade criuUpgrade criu-develUpgrade podmanUpgrade critUpgrade gvisor-tap-vsock-gvforwarderUpgrade skopeoUpgrade podman-pluginsUpgrade udicaUpgrade oci-seccomp-bpf-hookUpgrade skopeo-testsUpgrade podman-remoteUpgrade fuse-overlayfsUpgrade podman-catatonit | Mar 27, 2025 | Feb 26, 2025 |
| Redhat Openshift | — | Upgrade ose-ibmcloud-cluster-api-controllers-rhel9Upgrade ose-ibmcloud-cluster-api-controllers-rhel8 | Aug 10, 2026 | Feb 26, 2025 |
| Redhat_linux | — | Upgrade buildah-testsUpgrade aardvark-dnsUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade gvisor-tap-vsock-debugsourceUpgrade libslirp-debuginfoUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade criu-develUpgrade udicaUpgrade crun-debuginfoUpgrade critUpgrade libslirpUpgrade podman-testsUpgrade criu-debugsourceUpgrade conmon-debuginfoUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade podman-remoteUpgrade slirp4netns-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade cockpit-podmanUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade podman-dockerUpgrade criu-libsUpgrade libslirp-develUpgrade slirp4netnsUpgrade toolbox-debuginfoUpgrade skopeo-testsUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade skopeoUpgrade toolbox-debugsourceUpgrade conmon-debugsourceUpgrade podman-catatonitUpgrade conmonUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-remote-debuginfoUpgrade fuse-overlayfsUpgrade criu-libs-debuginfoUpgrade toolboxUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade gvisor-tap-vsockUpgrade criu-debuginfoUpgrade toolbox-testsUpgrade crunUpgrade containers-commonUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade buildahUpgrade podmanUpgrade python3-podmanUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade gvisor-tap-vsock-debuginfoUpgrade buildah-tests-debuginfoUpgrade podman-tests-debuginfoUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade podman-plugins | Mar 27, 2025 | Feb 26, 2025 |
| Rocky_linux | — | Upgrade slirp4netns-debuginfoUpgrade buildah-testsUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade criu-libsUpgrade containers-commonUpgrade runc-debugsourceUpgrade python3-criuUpgrade criu-debuginfoUpgrade podman-gvproxyUpgrade toolbox-testsUpgrade podman-remoteUpgrade podman-tests-debuginfoUpgrade podman-plugins-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade gvisor-tap-vsock-debugsourceUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade critUpgrade slirp4netnsUpgrade podman-debuginfoUpgrade gvisor-tap-vsockUpgrade crun-debugsourceUpgrade conmon-debuginfoUpgrade containernetworking-pluginsUpgrade buildah-debugsourceUpgrade crunUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade criu-debugsourceUpgrade buildah-tests-debuginfoUpgrade libslirp-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade aardvark-dnsUpgrade podman-debugsourceUpgrade toolbox-debugsourceUpgrade toolbox-debuginfoUpgrade runc | Jul 31, 2025 | Jul 29, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.5Upgrade Splunk Enterprise to version 9.4.3Upgrade Splunk Enterprise to version 9.2.7Upgrade Splunk Enterprise to version 9.1.10 | Sep 30, 2025 | Feb 26, 2025 |
| Suse | — | Upgrade git-bug-bash-completionUpgrade apptainerUpgrade docker-rootless-extrasUpgrade apptainer-sle15_6Upgrade docker-buildxUpgrade podman-remoteUpgrade podmanshUpgrade warewulf4-reference-docUpgrade gitea-tea-zsh-completionUpgrade git-bug-zsh-completionUpgrade rekorUpgrade podman-dockerUpgrade docker-zsh-completionUpgrade docker-stable-zsh-completionUpgrade docker-stable-bash-completionUpgrade docker-stableUpgrade git-bugUpgrade gitea-tea-bash-completionUpgrade cosignUpgrade docker-stable-buildxUpgrade warewulf4-overlayUpgrade podmanUpgrade docker-fish-completionUpgrade rclone-bash-completionUpgrade rclone-zsh-completionUpgrade cosign-zsh-completionUpgrade dockerUpgrade warewulf4Upgrade govulncheck-vulndbUpgrade rcloneUpgrade cosign-bash-completionUpgrade buildahUpgrade warewulf4-overlay-slurmUpgrade warewulf4-dracutUpgrade docker-stable-fish-completionUpgrade apptainer-leapUpgrade git-bug-fish-completionUpgrade gitea-teaUpgrade docker-stable-rootless-extrasUpgrade docker-bash-completionUpgrade apptainer-sle15_5Upgrade warewulf4-man | Mar 4, 2025 | Feb 26, 2025 |
| Ubuntu | — | Upgrade golang-golang-x-crypto-dev (Ubuntu Pro)Upgrade golang-go.crypto-dev (Ubuntu Pro)Upgrade golang-golang-x-crypto-dev | Jul 9, 2026 | Jul 9, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub