CVE-2025-22869

Potential denial of service in golang.org/x/crypto

Published Feb 26, 2025 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Description
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-5340 golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange
Github GHSA Github GHSA GHSA-hcg3-q754-cr77 golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange
Ubuntu USN Ubuntu USN USN-8519-1 Go Cryptography vulnerabilities
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:windows_machine_config:10.16::el9
Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.19::el9
Type Values Removed Values Added
CPEs cpe:/a:redhat:windows_machine_config:10.17::el9
Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift_gitops:1.14::el8
Type Values Removed Values Added
First Time appeared Redhat windows Machine Config
CPEs cpe:/a:redhat:windows_machine_config:10.18::el9
Vendors & Products Redhat windows Machine Config
Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.14::el8
cpe:/a:redhat:openshift:4.15::el9
Type Values Removed Values Added
First Time appeared Redhat openshift Gitops
CPEs cpe:/a:redhat:openshift_gitops:1.15::el8
Vendors & Products Redhat openshift Gitops
Type Values Removed Values Added
CPEs cpe:/o:redhat:enterprise_linux:10.0
Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.11::el9
Type Values Removed Values Added
First Time appeared Redhat openshift Data Foundation
CPEs cpe:/a:redhat:acm:2.10::el9
cpe:/a:redhat:openshift_data_foundation:4.18::el9
Vendors & Products Redhat openshift Data Foundation
Type Values Removed Values Added
First Time appeared Go
Go ssh
CPEs cpe:2.3:a:go:ssh:*:*:*:*:*:go:*:*
Vendors & Products Go
Go ssh
Type Values Removed Values Added
First Time appeared Redhat openshift Builds
CPEs cpe:/a:redhat:openshift_builds:1.2::el9
cpe:/a:redhat:openshift_builds:1.3::el9
Vendors & Products Redhat openshift Builds
Type Values Removed Values Added
First Time appeared Redhat openshift
CPEs cpe:/a:redhat:openshift:4.17::el9
Vendors & Products Redhat openshift
Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.12::el9
Type Values Removed Values Added
First Time appeared Redhat openshift Devspaces
CPEs cpe:/a:redhat:openshift_devspaces:3::el9
Vendors & Products Redhat openshift Devspaces
Type Values Removed Values Added
CPEs cpe:/a:redhat:multicluster_globalhub:1.3::el9
Type Values Removed Values Added
First Time appeared Redhat trusted Artifact Signer
CPEs cpe:/a:redhat:trusted_artifact_signer:1.1::el9
Vendors & Products Redhat trusted Artifact Signer
Type Values Removed Values Added
CPEs cpe:/a:redhat:acm:2.13::el8
Type Values Removed Values Added
First Time appeared Redhat advanced Cluster Security
Redhat multicluster Globalhub
CPEs cpe:/a:redhat:advanced_cluster_security:4.5::el8
cpe:/a:redhat:advanced_cluster_security:4.6::el8
cpe:/a:redhat:advanced_cluster_security:4.7::el8
cpe:/a:redhat:multicluster_globalhub:1.2::el9
Vendors & Products Redhat advanced Cluster Security
Redhat multicluster Globalhub
Type Values Removed Values Added
CPEs cpe:/a:redhat:enterprise_linux:9
Type Values Removed Values Added
CPEs cpe:/a:redhat:rhel_aus:8.4
cpe:/a:redhat:rhel_e4s:8.4
cpe:/a:redhat:rhel_eus:8.8
cpe:/a:redhat:rhel_tus:8.4
Type Values Removed Values Added
First Time appeared Redhat enterprise Linux
CPEs cpe:/a:redhat:enterprise_linux:8
Vendors & Products Redhat enterprise Linux
Type Values Removed Values Added
First Time appeared Redhat acm
Redhat rhel Aus
Redhat rhel E4s
Redhat rhel Eus
Redhat rhel Tus
CPEs cpe:/a:redhat:acm:2.13::el9
cpe:/a:redhat:rhel_aus:8.6
cpe:/a:redhat:rhel_e4s:8.6
cpe:/a:redhat:rhel_e4s:9.0
cpe:/a:redhat:rhel_eus:9.2
cpe:/a:redhat:rhel_eus:9.4
cpe:/a:redhat:rhel_tus:8.6
Vendors & Products Redhat acm
Redhat rhel Aus
Redhat rhel E4s
Redhat rhel Eus
Redhat rhel Tus
Type Values Removed Values Added
First Time appeared Redhat
Redhat gatekeeper
CPEs cpe:/a:redhat:gatekeeper:3.15::el9
cpe:/a:redhat:gatekeeper:3.17::el9
cpe:/a:redhat:gatekeeper:3.18::el9
Vendors & Products Redhat
Redhat gatekeeper
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Weaknesses CWE-770
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Type Values Removed Values Added
Description SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
Title Potential denial of service in golang.org/x/crypto
References