DNA View

CVE-2025-58181

Medium
Low Medium High Critical
5.3
CVSS Score
Published: Nov 19, 2025
Last Modified: Dec 11, 2025

Vulnerability Description

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack Vector
N
Attack Complexity
L
Privileges Required
N
User Interaction
N
Scope
U
Confidentiality
N
Integrity
N
Availability
L

Available Security Patches

2 patches available from vendors

View All Patches
Canonical (Ubuntu)

USN-7956-1

USN-7956-1: Google Guest Agent vulnerability

Severity
Unknown
Released
Jan 13, 2026
Security Update
SUSE

CVE-2025-58181

CVE-2025-58181

Severity
Unknown
Released
Dec 23, 2025
Security Update

Severity Details

5.3
out of 10.0
Medium

Key Information

Published Date
November 19, 2025