Lucene search
+L

126 matches found

OSV
OSV
•added 2025/04/12 12:30 a.m.•61 views

GHSA-HCG3-Q754-CR77 golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS7.5AI score0.00939EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2025/04/12 12:30 a.m.•62 views

golang.org/x/crypto Vulnerable to Denial of Service (DoS) via Slow or Incomplete Key Exchange

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.9AI score0.00939EPSS
SaveExploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/03/10 12:00 a.m.•21 views

CBL Mariner 2.0 Security Update: cert-manager / cf-cli / docker-buildx / docker-compose / kubernetes / kubevirt / moby-compose (CVE-2025-22869)

The version of cert-manager / cf-cli / docker-buildx / docker-compose / kubernetes / kubevirt / moby-compose installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22869 advisory. - SSH servers which...

7.5CVSS6.9AI score0.00939EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/06 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2025-22869

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at...

7.5CVSS6.4AI score0.00939EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2025/02/27 2:56 a.m.•16 views

SUSE CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.5AI score0.00939EPSS
SaveExploits0References70
OSV
OSV
•added 2025/02/26 8:14 a.m.•28 views

CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS7.3AI score
SaveExploits0References4
OSV
OSV
•added 2025/02/26 8:14 a.m.•12 views

AZL-57303 CVE-2025-22869 affecting package kubernetes for versions less than 1.30.10-3

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.4AI score0.00939EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/26 8:14 a.m.•22 views

CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS0.00939EPSS
SaveExploits0References4
OSV
OSV
•added 2025/02/26 8:14 a.m.•15 views

AZL-57353 CVE-2025-22869 affecting package gh for versions less than 2.62.0-7

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.6AI score0.00939EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/02/26 3:07 a.m.•11 views

CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS6.2AI score0.00939EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/02/26 3:07 a.m.•26 views

CVE-2025-22869 Potential denial of service in golang.org/x/crypto

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

0.00939EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/02/26 3:07 a.m.•18 views

CVE-2025-22869 Potential denial of service in golang.org/x/crypto

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.3AI score0.00939EPSS
SaveExploits0References3
Mend
Mend
•added 2025/02/26 3:07 a.m.•3 views

CVE-2025-22869

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

8.7CVSS6.5AI score0.00939EPSS
SaveExploits0References9
CVE
CVE
•added 2025/02/26 3:07 a.m.•494 views

CVE-2025-22869

SSH servers implementing file transfer protocols are vulnerable to a Denial of Service (DoS) attack due to a resource exhaustion issue (CWE-770 ). A client can complete the key exchange slowly or not at all, forcing the server to read pending content into memory without transmitting it. This vuln...

7.5CVSS7.4AI score0.00939EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•3 views

CVE-2025-22869: Allocation of Resources Without Limits or Throttling

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

7.5CVSS5.8AI score0.00939EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/25 12:00 a.m.•15 views

PT-2025-8666

Name of the Vulnerable Software and Affected Versions Teleport affected versions not specified Description The issue allows a denial of service attack against SSH servers that implement file transfer protocols. This occurs when clients complete the key exchange slowly or not at all, causing pendi...

7.8CVSS7.7AI score0.00939EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/11/12 4:06 p.m.•18 views

CVE-2024-52010 Zoraxy has an authenticated command injection in the Web SSH feature

Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH...

8.6CVSS8.2AI score0.01503EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2024/08/28 1:28 p.m.•1629 views

Exploit for Race Condition in Openbsd Openssh

CVE-2024-6387 Vulnerability Checker Overview This Python...

8.1CVSS8.2AI score0.99506EPSS
SaveExploits71
GithubExploit
GithubExploit
•added 2024/07/09 5:40 p.m.•1395 views

Exploit for Race Condition in Openbsd Openssh

CVE-2024-6387 Vulnerability Checker Overview This Python...

8.1CVSS8.2AI score0.99506EPSS
SaveExploits71
Redos
Redos
•added 2024/04/12 12:00 a.m.•67 views

ROS-20240412-06

A vulnerability in the OpenSSL library's implementation of the SM2 cryptographic algorithm is related to buffer copying without checking the size of the input data. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code by transmitting specially crafte...

9.8CVSS8AI score0.87816EPSS
SaveExploits2
Rows per page
Query Builder