CVE-2025-22869

Potential denial of service in golang.org/x/crypto

High · published February 26, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00939 · 60.5th percentile
Published
2025-02-26T03:07Z
EPSS history
Timeline
  • 26 FEB 03:07Z
    Potential denial of service in golang.org/x/crypto
    cvelistv5