GO-2025-3487

vendorUSosv

Potential denial of service in golang.org/x/crypto

view advisory published 2025-02-26Licence: per source

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-22869US——
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan