CVE-2025-22869
HighCVSS 7.5Summary
SSH servers implementing file transfer protocols are vulnerable to a denial of service attack from clients that complete the key exchange slowly or not at all, causing pending content to be read into memory but never transmitted.
Risk Assessment
An attacker can exhaust SSH server memory, leading to denial of service for legitimate users. This only requires the ability to connect to the server.
Recommendation
Update the SSH server software to a version containing the fix. Consider implementing timeouts and resource limits for connections.
Other vulnerabilities in SSH server
See all- CVE-2025-58181Medium
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
- CVE-1999-1010Low
SSH server version 1.2.27 allows a client to use the 'none' cipher, even if it is not permitted by the server policy.
Original NVD description (English source)
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS