VDB

RHSA-2025%3A3763

RHSA-2025%3A3763 PUBLISHED CVSS 7.5 HIGH

A flaw was found in the golang.org/x/crypto/ssh package. SSH clients and servers are vulnerable to increased resource consumption, possibly leading to memory exhaustion and a DoS. This can occur during key exchange when the other party is slow to respond during key exchange.

Risk Scores

CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatrhacm2/rbac-query-proxy-rhel9@sha256:264a622bf7c9a95f669a43542a8a92e51c22b70cf722028914f7efce09bf5822_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/rbac-query-proxy-rhel9@sha256:264a622bf7c9a95f669a43542a8a92e51c22b70cf722028914f7efce09bf5822_s390x, *, rhacm2/rbac-query-proxy-rhel9@sha256:264a622bf7c9a95f669a43542a8a92e51c22b70cf722028914f7efce09bf5822_s390x
Red Hatrhacm2/acm-operator-bundle@sha256:817fec26973e4b6c7cc0e652dafe1949ac358e6f451c734b69f0a91bc7dcc2ac_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/acm-operator-bundle@sha256:817fec26973e4b6c7cc0e652dafe1949ac358e6f451c734b69f0a91bc7dcc2ac_s390x, *, rhacm2/acm-operator-bundle@sha256:817fec26973e4b6c7cc0e652dafe1949ac358e6f451c734b69f0a91bc7dcc2ac_s390x
Red Hatrhacm2/acm-cluster-permission-rhel9@sha256:38b6ebad041fbbb5de69266f7b7244da52d0f792a9a7c4d9d5060a5f2cc7a067_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/acm-cluster-permission-rhel9@sha256:38b6ebad041fbbb5de69266f7b7244da52d0f792a9a7c4d9d5060a5f2cc7a067_s390x, rhacm2/acm-cluster-permission-rhel9@sha256:38b6ebad041fbbb5de69266f7b7244da52d0f792a9a7c4d9d5060a5f2cc7a067_s390x, rhacm2/acm-cluster-permission-rhel9@sha256:38b6ebad041fbbb5de69266f7b7244da52d0f792a9a7c4d9d5060a5f2cc7a067_s390x
Red Hatrhacm2/node-exporter-rhel9@sha256:08eaa1ec0271587cdc437db82a1f6611f4a1d46d803108ea17065fac5ba112ef_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9*, *, *
Red Hatrhacm2/search-collector-rhel9@sha256:a77192dbda981b8442f00f4aa0bee852428a87e8a24df7bb28c2aaac52a28070_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9*, rhacm2/search-collector-rhel9@sha256:a77192dbda981b8442f00f4aa0bee852428a87e8a24df7bb28c2aaac52a28070_amd64, rhacm2/search-collector-rhel9@sha256:a77192dbda981b8442f00f4aa0bee852428a87e8a24df7bb28c2aaac52a28070_amd64
Red Hatrhacm2/config-policy-controller-rhel9@sha256:d82d4ee36370f6f14d34b544debd5b4b0d5c807f40cb3abdb20d655df2db76a6_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9*, rhacm2/config-policy-controller-rhel9@sha256:d82d4ee36370f6f14d34b544debd5b4b0d5c807f40cb3abdb20d655df2db76a6_amd64, *
Red Hatrhacm2/acm-siteconfig-rhel9@sha256:0f61e26a65cc868cfae96ec9c11b52d0f276944720b64acc06a3794456be07ac_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/acm-siteconfig-rhel9@sha256:0f61e26a65cc868cfae96ec9c11b52d0f276944720b64acc06a3794456be07ac_ppc64le, rhacm2/acm-siteconfig-rhel9@sha256:0f61e26a65cc868cfae96ec9c11b52d0f276944720b64acc06a3794456be07ac_ppc64le, rhacm2/acm-siteconfig-rhel9@sha256:0f61e26a65cc868cfae96ec9c11b52d0f276944720b64acc06a3794456be07ac_ppc64le
Red Hatrhacm2/rbac-query-proxy-rhel9@sha256:127becaaf4e3e8fc9f711878f7ada3485f3546ea59d7e22982f9b30dfe909e58_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9*, *, *
Red Hatrhacm2/acm-search-v2-rhel9@sha256:65eb3d40f2a7f96b3552b2f141bdc953d9c669d4443027b4fad0174419a8bb8b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9*, rhacm2/acm-search-v2-rhel9@sha256:65eb3d40f2a7f96b3552b2f141bdc953d9c669d4443027b4fad0174419a8bb8b_amd64, rhacm2/acm-search-v2-rhel9@sha256:65eb3d40f2a7f96b3552b2f141bdc953d9c669d4443027b4fad0174419a8bb8b_amd64
Red Hatrhacm2/multicloud-integrations-rhel9@sha256:deb5d296382a26bfb64557e154c309067949fd1d0a06e640a3cdcc3170aa081a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/multicloud-integrations-rhel9@sha256:deb5d296382a26bfb64557e154c309067949fd1d0a06e640a3cdcc3170aa081a_amd64, rhacm2/multicloud-integrations-rhel9@sha256:deb5d296382a26bfb64557e154c309067949fd1d0a06e640a3cdcc3170aa081a_amd64, *
Red Hatrhacm2/governance-policy-propagator-rhel9@sha256:3438732d5068a5f2cd2d9ebde77de2ccfcbbf6b2de3fe4b04224bc2801a5c2ad_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/governance-policy-propagator-rhel9@sha256:3438732d5068a5f2cd2d9ebde77de2ccfcbbf6b2de3fe4b04224bc2801a5c2ad_ppc64le, rhacm2/governance-policy-propagator-rhel9@sha256:3438732d5068a5f2cd2d9ebde77de2ccfcbbf6b2de3fe4b04224bc2801a5c2ad_ppc64le, rhacm2/governance-policy-propagator-rhel9@sha256:3438732d5068a5f2cd2d9ebde77de2ccfcbbf6b2de3fe4b04224bc2801a5c2ad_ppc64le
Red Hatrhacm2/thanos-receive-controller-rhel9@sha256:1233e873bd07698f8ec8117e63d452da35407db22cdce3d55d84365ed2123a3e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/thanos-receive-controller-rhel9@sha256:1233e873bd07698f8ec8117e63d452da35407db22cdce3d55d84365ed2123a3e_s390x, rhacm2/thanos-receive-controller-rhel9@sha256:1233e873bd07698f8ec8117e63d452da35407db22cdce3d55d84365ed2123a3e_s390x, rhacm2/thanos-receive-controller-rhel9@sha256:1233e873bd07698f8ec8117e63d452da35407db22cdce3d55d84365ed2123a3e_s390x
Red Hatrhacm2/acm-cli-rhel9@sha256:a2e706586a41dee7bf197285ddb55e53518d422f26e30513230aa1afdd45fdc9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9*, *, *
Red Hatrhacm2/acm-grafana-rhel9@sha256:67effeeb93c2b4e1ef33befff1a61ba0b0b62d46d3826eb360083c535b98cc70_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9*, rhacm2/acm-grafana-rhel9@sha256:67effeeb93c2b4e1ef33befff1a61ba0b0b62d46d3826eb360083c535b98cc70_ppc64le, rhacm2/acm-grafana-rhel9@sha256:67effeeb93c2b4e1ef33befff1a61ba0b0b62d46d3826eb360083c535b98cc70_ppc64le
Red Hatrhacm2/acm-governance-policy-framework-addon-rhel9@sha256:6710f0af6aa13c930a5d0880123fbe9d00e96ab7b322dd3573b2b3f5f031665d_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:6710f0af6aa13c930a5d0880123fbe9d00e96ab7b322dd3573b2b3f5f031665d_arm64, rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:6710f0af6aa13c930a5d0880123fbe9d00e96ab7b322dd3573b2b3f5f031665d_arm64, rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:6710f0af6aa13c930a5d0880123fbe9d00e96ab7b322dd3573b2b3f5f031665d_arm64
Red Hatrhacm2/acm-flightctl-worker-rhel9@sha256:a9a1dfe2b744488e1fe142e0953e4d6d3445ae0abef61c5145fe59eedd9eccd3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9*, *, *
Red Hatrhacm2/multiclusterhub-rhel9@sha256:55858652bdb7998c36729f6c5e699d056a38b5dc29c4c7101abd36cf60481512_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/multiclusterhub-rhel9@sha256:55858652bdb7998c36729f6c5e699d056a38b5dc29c4c7101abd36cf60481512_s390x, *, *
Red Hatrhacm2/memcached-rhel9@sha256:29f0633f8bfac854cc9c84fd2706bbdd7e91dcef13795d97e5b4faae97f9b91e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/memcached-rhel9@sha256:29f0633f8bfac854cc9c84fd2706bbdd7e91dcef13795d97e5b4faae97f9b91e_arm64, rhacm2/memcached-rhel9@sha256:29f0633f8bfac854cc9c84fd2706bbdd7e91dcef13795d97e5b4faae97f9b91e_arm64, rhacm2/memcached-rhel9@sha256:29f0633f8bfac854cc9c84fd2706bbdd7e91dcef13795d97e5b4faae97f9b91e_arm64
Red Hatrhacm2/acm-prometheus-config-reloader-rhel9@sha256:575bf28452ac81f821247dea56442aba6162eadd1951c0129ed701c85ab30ac0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/acm-prometheus-config-reloader-rhel9@sha256:575bf28452ac81f821247dea56442aba6162eadd1951c0129ed701c85ab30ac0_amd64, rhacm2/acm-prometheus-config-reloader-rhel9@sha256:575bf28452ac81f821247dea56442aba6162eadd1951c0129ed701c85ab30ac0_amd64, *
Red Hatrhacm2/acm-cluster-permission-rhel9@sha256:fb6812fb983a8da953808a741236469a74fd29c783fc83ca185805cf7528c414_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9rhacm2/acm-cluster-permission-rhel9@sha256:fb6812fb983a8da953808a741236469a74fd29c783fc83ca185805cf7528c414_ppc64le, rhacm2/acm-cluster-permission-rhel9@sha256:fb6812fb983a8da953808a741236469a74fd29c783fc83ca185805cf7528c414_ppc64le, *

…and 388 more

Timeline

  • Apr 9, 2025 CVE Published
  • Apr 24, 2026 Distribution Patch
  • Apr 29, 2026 Security Advisory
  • May 15, 2026 Distribution Patch
  • May 15, 2026 Security Advisory
  • Jun 18, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›