Denial Of Service (DoS)

🗓️ 22 Apr 2025 14:45:14Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 13 Views

Vulnerability in golang.org/x/crypto allows Denial Of Service via slow key exchanges using memory.

Reporter	Title	Published	Views	Family All 1344
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	6 Aug 202513:40	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider (CVE-2024-45337, CVE-2025-22869)	9 Jul 202504:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (March 2025)	27 Mar 202516:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/crypto which is vulnerable to CVE-2024-45337 and CVE-2025-22869	8 Oct 202508:00	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities which can affect IBM Storage Scale cloudkit and CES S3 are now addressed. (CVE-2025-22868, CVE-2025-22869)	9 May 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in golang.org/x/crypto/ssh [CVE-2025-22869]	13 Jun 202516:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	20 May 202521:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to DoS due to unbounded memory allocation in golang.org/x/crypto SSH implementation (CVE-2025-22869)	30 Jan 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in SSH affects IBM watsonx Orchestrate with watsonx Assistant Cartridge	7 Aug 202500:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Event Streams is vulnerable to a denial of service	4 Mar 202605:45	–	ibm

Vulners

Node

rclone rcloneMatch1.53.3-r2go

AND

rclone rcloneMatch1.67.0-r1go

AND

rclone rcloneMatch1.59.2-r0go

AND

rclone rcloneMatch1.60.1-r0go

AND

rclone rcloneMatch1.58.0-r3go

AND

rclone rcloneMatch1.65.0-r0go

AND

rclone rcloneMatch1.60.0-r1go

AND

rclone rcloneMatch1.65.2-r0go

AND

rclone rcloneMatch1.57.0-r1go

AND

rclone rcloneMatch1.59.0-r0go

AND

rclone rcloneMatch1.63.1-r3go

AND

rclone rcloneMatch1.66.0-r2go

AND

rclone rcloneMatch1.69.0-r1go

AND

rclone rcloneMatch1.56.2-r0go

AND

rclone rcloneMatch1.69.0-r2go

AND

rclone rcloneMatch1.60.0-r0go

AND

rclone rcloneMatch1.63.0-r0go

AND

rclone rcloneMatch1.69.1-r1go

AND

rclone rcloneMatch1.59.0-r1go

AND

rclone rcloneMatch1.68.0-r0go

AND

rclone rcloneMatch1.67.0-r0go

AND

rclone rcloneMatch1.62.2-r0go

AND

rclone rcloneMatch1.69.1-r0go

AND

rclone rcloneMatch1.61.1-r0go

AND

rclone rcloneMatch1.69.0-r0go

AND

rclone rcloneMatch1.58.0-r1go

AND

rclone rcloneMatch1.63.1-r1go

AND

rclone rcloneMatch1.65.2-r1go

AND

rclone rcloneMatch1.61.1-r1go

AND

rclone rcloneMatch1.57.0-r2go

AND

rclone rcloneMatch1.58.1-r1go

AND

rclone rcloneMatch1.58.0-r2go

AND

rclone rcloneMatch1.60.1-r1go

AND

rclone rcloneMatch1.64.2-r0go

AND

rclone rcloneMatch1.63.0-r1go

AND

rclone rcloneMatch1.59.2-r2go

AND

rclone rcloneMatch1.62.2-r2go

AND

rclone rcloneMatch1.59.1-r0go

AND

rclone rcloneMatch1.58.1-r0go

AND

rclone rcloneMatch1.57.0-r3go

AND

rclone rcloneMatch1.53.3-r4go

AND

rclone rcloneMatch1.66.0-r3go

AND

rclone rcloneMatch1.63.1-r0go

AND

rclone rcloneMatch1.66.0-r1go

AND

rclone rcloneMatch1.51.0-r1go

AND

rclone rcloneMatch1.51.0-r0go

AND

rclone rcloneMatch1.66.0-r0go

AND

rclone rcloneMatch1.62.2-r1go

AND

rclone rcloneMatch1.61.1-r2go

AND

rclone rcloneMatch1.68.2-r0go

AND

rclone rcloneMatch1.59.1-r1go

AND

rclone rcloneMatch1.59.0-r2go

AND

rclone rcloneMatch1.53.3-r1go

AND

rclone rcloneMatch1.63.1-r2go

AND

rclone rcloneMatch1.68.1-r0go

AND

alpinelinux alpine_linuxMatchedge

apple mac_os_xRangev0.0.0-20190701094942-4def268fd1a4–0.0.0-20190701094942-4def268fd1a4go

Source	Link
github	www.github.com/golang/go/issues/71931
go-review	www.go-review.googlesource.com/c/crypto/+/652135
github	www.github.com/golang/crypto/commit/7292932d45d55c7199324ab0027cc86e8198aa22
github	www.github.com/advisories/GHSA-hcg3-q754-cr77
go	www.go.dev/cl/652135
go	www.go.dev/issue/71931
pkg	www.pkg.go.dev/vuln/GO-2025-3487
security	www.security.netapp.com/advisory/ntap-20250411-0010/

01 May 2025 20:26Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.00607

SSVC