Lucene search
+L

2130 matches found

OSV
OSV
added 2025/02/26 8:14 a.m.20 views

AZL-57459 CVE-2025-22869 affecting package podman 4.1.1-26

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.13 views

AZL-57289 CVE-2025-22869 affecting package cri-o 1.30.1-1

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.14 views

AZL-57393 CVE-2025-22869 affecting package packer for versions less than 1.9.5-6

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.17 views

AZL-57434 CVE-2025-22869 affecting package moby-compose for versions less than 2.17.3-10

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.31 views

AZL-57428 CVE-2025-22869 affecting package kubernetes for versions less than 1.28.4-15

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.9 views

AZL-57303 CVE-2025-22869 affecting package kubernetes for versions less than 1.30.10-3

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.12 views

AZL-57353 CVE-2025-22869 affecting package gh for versions less than 2.62.0-7

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.20 views

CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS7.3AI score
SaveExploits0References4
OSV
OSV
added 2025/02/26 8:14 a.m.14 views

AZL-57350 CVE-2025-22869 affecting package telegraf for versions less than 1.31.0-7

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.21 views

AZL-57473 CVE-2025-22869 affecting package moby-engine for versions less than 24.0.9-15

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.10 views

AZL-57286 CVE-2025-22869 affecting package podman for versions less than 5.6.1-2

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00921EPSS
SaveExploits0References1
OSV
OSV
added 2025/02/26 8:14 a.m.26 views

UBUNTU-CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.7AI score0.00921EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
added 2025/02/26 3:07 a.m.16 views

CVE-2025-22869 Potential denial of service in golang.org/x/crypto

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.3AI score0.00921EPSS
SaveExploits0References3
CVE
CVE
added 2025/02/26 3:07 a.m.477 views

CVE-2025-22869

CVE-2025-22869 affects podman packages, specifically versions

7.5CVSS7.4AI score0.00921EPSS
SaveExploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2025/02/26 3:07 a.m.17 views

CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS7.2AI score0.00921EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/02/26 12:00 a.m.4 views

Google Go 安全漏洞

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google USA. A security vulnerability exists in Google Go that stems from a slow or incomplete client-side key exchange, resulting in a denial of service...

7.5CVSS6.3AI score0.00921EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
added 2025/02/13 1:42 a.m.8 views

SUSE CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

6.5CVSS7.1AI score0.00378EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/12 9:55 a.m.13 views

CVE-2022-37660

A flaw was found in hostapd. This vulnerability allows an attacker to subvert future PKEX associations via passive observation and reuse of public key exchange elements. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product...

7.4CVSS6.8AI score0.00378EPSS
SaveExploits0References5
OSV
OSV
added 2025/02/11 11:15 p.m.8 views

UBUNTU-CVE-2022-37660

In hostapd 2.10 and earlier, the PKEX code remains active even after a successful PKEX association. An attacker that successfully bootstrapped public keys with another entity using PKEX in the past, will be able to subvert a future bootstrapping by passively observing public keys, re-using the...

6.5CVSS7.2AI score0.00378EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/02/11 12:00 a.m.11 views

hostapd 安全漏洞

hostapd is a user space daemon for access points and authentication servers by the individual developer Jouni Malinen. A security vulnerability exists in hostapd version 2.10 and earlier, which stems from the PKEX code remaining active after successful association, making it vulnerable to attack...

6.5CVSS7.6AI score0.00378EPSS
SaveExploits0References1
Rows per page
Query Builder