CVE-2025-22869
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
- T
Tim Bastin detected CVE-2025-22869 with a risk of 2.12
System updated the risk assessment from 2.12 to 1.41
System recalculated raw risk assessment
System updated the risk assessment from 1.41 to 4.25
System recalculated raw risk assessment
- T
Tim Bastin detected CVE-2025-22869 with scanner: container-scanning
System updated the risk assessment from 4.25 to 0.86
System recalculated raw risk assessment
System updated the risk assessment from 0.86 to 1.41
System recalculated raw risk assessment
System created a ticket for CVE-2025-22869
Everything after this entry will be synced with the external system. The ticket can be found at https://gitlab.opencode.de/open-code/badgebackend/badge-api/-/issues/14
Add a comment
Affected component
golang.org/x/crypto