CVE-2025-22869

HIGH

7.5

Descricao

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

Detalhes CVE

Pontuacao CVSS v3.17.5

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado2/26/2025

Ultima modificacao5/1/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

go:ssh

Fraquezas (CWE)

CWE-770

Referencias

https://go.dev/cl/652135(security@golang.org)

https://go.dev/issue/71931(security@golang.org)

https://pkg.go.dev/vuln/GO-2025-3487(security@golang.org)

https://security.netapp.com/advisory/ntap-20250411-0010/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.