CVE-2025-58181

CVE-2025-58181CVE-2025-58181

golang / crypto

Description

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

Scoring

CVSS 5.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Last modified2026-10-18
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.