VDB

RHSA-2025%3A3438

RHSA-2025%3A3438 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatadvanced-cluster-security/rhacs-central-db-rhel8@sha256:4f1d7a6ee1bce410f54fda58f1c651faa6c6cc6249a6ad724ccf2ca598e9e611_amd64 as a component of RHACS 4.7 for RHEL 8*, advanced-cluster-security/rhacs-central-db-rhel8@sha256:4f1d7a6ee1bce410f54fda58f1c651faa6c6cc6249a6ad724ccf2ca598e9e611_amd64, *
Red Hatadvanced-cluster-security/rhacs-central-db-rhel8@sha256:642f12c888648c4a7117ff598cffa518804224baf4aba71b33533156f9684f73_ppc64le as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-central-db-rhel8@sha256:642f12c888648c4a7117ff598cffa518804224baf4aba71b33533156f9684f73_ppc64le, advanced-cluster-security/rhacs-central-db-rhel8@sha256:642f12c888648c4a7117ff598cffa518804224baf4aba71b33533156f9684f73_ppc64le, advanced-cluster-security/rhacs-central-db-rhel8@sha256:642f12c888648c4a7117ff598cffa518804224baf4aba71b33533156f9684f73_ppc64le
Red Hatadvanced-cluster-security/rhacs-scanner-rhel8@sha256:dcf15eb8752a15d806eba03203d5eb5c4f124f5f3bed46a936f65be6e36cb488_amd64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-scanner-rhel8@sha256:dcf15eb8752a15d806eba03203d5eb5c4f124f5f3bed46a936f65be6e36cb488_amd64, advanced-cluster-security/rhacs-scanner-rhel8@sha256:dcf15eb8752a15d806eba03203d5eb5c4f124f5f3bed46a936f65be6e36cb488_amd64, advanced-cluster-security/rhacs-scanner-rhel8@sha256:dcf15eb8752a15d806eba03203d5eb5c4f124f5f3bed46a936f65be6e36cb488_amd64
Red Hatadvanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e49e4ae3935b8656577ca5175cff68705b6201af22d74b5e85e13f0462209152_ppc64le as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e49e4ae3935b8656577ca5175cff68705b6201af22d74b5e85e13f0462209152_ppc64le, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e49e4ae3935b8656577ca5175cff68705b6201af22d74b5e85e13f0462209152_ppc64le, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e49e4ae3935b8656577ca5175cff68705b6201af22d74b5e85e13f0462209152_ppc64le
Red Hatadvanced-cluster-security/rhacs-scanner-db-rhel8@sha256:dfa12c1bf8fae47c8af811bdcc1e1fa4d1e3431ddeddc15d73e861d14f270783_amd64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:dfa12c1bf8fae47c8af811bdcc1e1fa4d1e3431ddeddc15d73e861d14f270783_amd64, *, *
Red Hatadvanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b19e18aa971527beb1e4f13f761768b7f9191bdbbfed4933cf417b6a773ad212_ppc64le as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:b19e18aa971527beb1e4f13f761768b7f9191bdbbfed4933cf417b6a773ad212_ppc64le, *, *
Red Hatadvanced-cluster-security/rhacs-main-rhel8@sha256:b68da1294230374e9ad7fbc3c4adb68b849188ee759ec96a9affea10518a9bfe_ppc64le as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-main-rhel8@sha256:b68da1294230374e9ad7fbc3c4adb68b849188ee759ec96a9affea10518a9bfe_ppc64le, *, *
Red Hatadvanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e34317570015424ed4731794514b7db26149449efc4304eb09533c0cb1949808_arm64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e34317570015424ed4731794514b7db26149449efc4304eb09533c0cb1949808_arm64, advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e34317570015424ed4731794514b7db26149449efc4304eb09533c0cb1949808_arm64, advanced-cluster-security/rhacs-scanner-v4-db-rhel8@sha256:e34317570015424ed4731794514b7db26149449efc4304eb09533c0cb1949808_arm64
Red Hatadvanced-cluster-security/rhacs-main-rhel8@sha256:daf9e172c23638e5af924baecb4e06e5606abb48bbe299f52991fda4fc1ccf63_amd64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-main-rhel8@sha256:daf9e172c23638e5af924baecb4e06e5606abb48bbe299f52991fda4fc1ccf63_amd64, *, advanced-cluster-security/rhacs-main-rhel8@sha256:daf9e172c23638e5af924baecb4e06e5606abb48bbe299f52991fda4fc1ccf63_amd64
Red Hatadvanced-cluster-security/rhacs-main-rhel8@sha256:7a8641b3cf48e1d499167c3f7a8dd37936c769e413cfcca330f6e7b32e2a08e1_arm64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-main-rhel8@sha256:7a8641b3cf48e1d499167c3f7a8dd37936c769e413cfcca330f6e7b32e2a08e1_arm64, *, advanced-cluster-security/rhacs-main-rhel8@sha256:7a8641b3cf48e1d499167c3f7a8dd37936c769e413cfcca330f6e7b32e2a08e1_arm64
Red Hatadvanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ff829868a8fdb5c8c41523a07c25ff79cd1c257fae6231f107a1b81c9ac707bc_s390x as a component of RHACS 4.7 for RHEL 8*, advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:ff829868a8fdb5c8c41523a07c25ff79cd1c257fae6231f107a1b81c9ac707bc_s390x, *
Red Hatadvanced-cluster-security/rhacs-operator-bundle@sha256:112a4cf477dd61be7026b5455b2f737a6a2f7148d7cfd740e7dfa32004916ccc_s390x as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-operator-bundle@sha256:112a4cf477dd61be7026b5455b2f737a6a2f7148d7cfd740e7dfa32004916ccc_s390x, advanced-cluster-security/rhacs-operator-bundle@sha256:112a4cf477dd61be7026b5455b2f737a6a2f7148d7cfd740e7dfa32004916ccc_s390x, advanced-cluster-security/rhacs-operator-bundle@sha256:112a4cf477dd61be7026b5455b2f737a6a2f7148d7cfd740e7dfa32004916ccc_s390x
Red Hatadvanced-cluster-security/rhacs-operator-bundle@sha256:112a4cf477dd61be7026b5455b2f737a6a2f7148d7cfd740e7dfa32004916ccc_s390x as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-operator-bundle@sha256:112a4cf477dd61be7026b5455b2f737a6a2f7148d7cfd740e7dfa32004916ccc_s390x, *, *
Red Hatadvanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:a825a3b05b4a46548cf2f991a070e3aa4b98d5fb6819e340a8af88a66511bf4e_ppc64le as a component of RHACS 4.7 for RHEL 8*, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:a825a3b05b4a46548cf2f991a070e3aa4b98d5fb6819e340a8af88a66511bf4e_ppc64le, advanced-cluster-security/rhacs-scanner-slim-rhel8@sha256:a825a3b05b4a46548cf2f991a070e3aa4b98d5fb6819e340a8af88a66511bf4e_ppc64le
Red Hatadvanced-cluster-security/rhacs-roxctl-rhel8@sha256:5ee153003afa7c54f5f148a030e589fa253f244dba04c2b83905ab14b1e84536_amd64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5ee153003afa7c54f5f148a030e589fa253f244dba04c2b83905ab14b1e84536_amd64, *, advanced-cluster-security/rhacs-roxctl-rhel8@sha256:5ee153003afa7c54f5f148a030e589fa253f244dba04c2b83905ab14b1e84536_amd64
Red Hatadvanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:51b49940fe70e60f7ff3e95fa2e6409735cc6b27462cb175205eec1e3ec2dd08_arm64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-scanner-v4-rhel8@sha256:51b49940fe70e60f7ff3e95fa2e6409735cc6b27462cb175205eec1e3ec2dd08_arm64, *, *
Red Hatadvanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e49e4ae3935b8656577ca5175cff68705b6201af22d74b5e85e13f0462209152_ppc64le as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e49e4ae3935b8656577ca5175cff68705b6201af22d74b5e85e13f0462209152_ppc64le, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:e49e4ae3935b8656577ca5175cff68705b6201af22d74b5e85e13f0462209152_ppc64le, *
Red Hatadvanced-cluster-security/rhacs-scanner-db-rhel8@sha256:068659c8583cb1f9d27a92a62560b7e1b7d4147df49eef43df9c79aa6abf1eb3_arm64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:068659c8583cb1f9d27a92a62560b7e1b7d4147df49eef43df9c79aa6abf1eb3_arm64, advanced-cluster-security/rhacs-scanner-db-rhel8@sha256:068659c8583cb1f9d27a92a62560b7e1b7d4147df49eef43df9c79aa6abf1eb3_arm64, *
Red Hatadvanced-cluster-security/rhacs-central-db-rhel8@sha256:642f12c888648c4a7117ff598cffa518804224baf4aba71b33533156f9684f73_ppc64le as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-central-db-rhel8@sha256:642f12c888648c4a7117ff598cffa518804224baf4aba71b33533156f9684f73_ppc64le, *, advanced-cluster-security/rhacs-central-db-rhel8@sha256:642f12c888648c4a7117ff598cffa518804224baf4aba71b33533156f9684f73_ppc64le
Red Hatadvanced-cluster-security/rhacs-rhel8-operator@sha256:9d4b8c3277e1301f775a3a9d90dbe278a43f46af999bbea19b3d347c26a6ee33_amd64 as a component of RHACS 4.7 for RHEL 8advanced-cluster-security/rhacs-rhel8-operator@sha256:9d4b8c3277e1301f775a3a9d90dbe278a43f46af999bbea19b3d347c26a6ee33_amd64, *, *

…and 76 more

Timeline

  • Apr 1, 2025 CVE Published
  • Apr 24, 2026 Distribution Patch
  • Apr 24, 2026 Distribution Patch
  • Apr 24, 2026 Security Advisory
  • Apr 24, 2026 Security Advisory
  • Apr 24, 2026 Security Advisory
  • Jun 18, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›