Vulnerability Description
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Go | Ssh | < 0.35.0 |
Related Weaknesses (CWE)
References
- https://go.dev/cl/652135Patch
- https://go.dev/issue/71931Issue TrackingPatch
- https://pkg.go.dev/vuln/GO-2025-3487Vendor Advisory
- https://security.netapp.com/advisory/ntap-20250411-0010/Third Party Advisory
FAQ
What is CVE-2025-22869?
CVE-2025-22869 is a vulnerability with a CVSS score of 7.5 (HIGH). SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read ...
How severe is CVE-2025-22869?
CVE-2025-22869 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-22869?
Check the references section above for vendor advisories and patch information. Affected products include: Go Ssh.