View all vulnerabilities

CVE-2025-22869

Potential denial of service in golang.org/x/crypto

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

Patch Available

Fix available through Seal Security. No upgrade required, protect your application instantly.

Fix without upgrading
Vulnerability Details
Score
Score Vector
Affected Versions
golang.org/x/crypto < 0.35.0
Severity
Ecosystem
GO
Publish Date
February 25, 2025
Modified Date
April 14, 2025