SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade etcd | Apr 29, 2026 | Nov 19, 2025 |
| Amazon Linux Ami 2 | — | Upgrade dockerUpgrade containerdUpgrade docker-debuginfoUpgrade nerdctl-debuginfoUpgrade containerd-debuginfoUpgrade runfinch-finchUpgrade nerdctlUpgrade amazon-cloudwatch-agentUpgrade containerd-stress | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade nerdctlUpgrade dockerUpgrade amazon-cloudwatch-agentUpgrade docker-debuginfoUpgrade docker-debugsourceUpgrade runfinch-finch | Jan 12, 2026 | Nov 19, 2025 |
| Freebsd | — | Upgrade oauth2-proxy | Jan 27, 2026 | Jan 18, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 19, 2025 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.12Upgrade Splunk Enterprise to version 10.2.1Upgrade Splunk Enterprise to version 10.0.7Upgrade Splunk Enterprise to version 10.4.0Upgrade Splunk Enterprise to version 9.3.10Upgrade Splunk Enterprise to version 9.3.13Upgrade Splunk Enterprise to version 10.0.4Upgrade Splunk Enterprise to version 10.2.4Upgrade Splunk Enterprise to version 9.4.9 | Jul 30, 2026 | Nov 19, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub