2 matches found
Allocation of Resources Without Limits or Throttling
Overview golang.org/x/crypto/ssh is a SSH client and server Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the SSH servers. An attacker can exhaust system memory resources by sending GSSAPI authentication requests with an excessive...
6.9CVSS7AI score0.0057EPSS
SaveExploits0References2
[SECURITY] Fedora 16 Update: libgssglue-0.4-0.fc16
This library exports a gssapi interface, but doesn't implement any gssapi mechanisms itself; instead it calls gssapi routines in other libraries, depending on the mechanism...
6.2CVSS2.4AI score0.0044EPSS
SaveExploits0
20