CVE-2025-22869

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-770

Affected software

No affected versions have been published.

Timeline

Published: Feb 26, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-22877.8A local code execution vulnerability exists in the Rockwell Automation Arena® due to an uninitialized pointer. The flaw is result of improp CVE-2025-228704.4Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY enviro CVE-2025-228719.1The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines. This can permit request smuggling i CVE-2025-228726.5The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When directl CVE-2025-228733.8It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For example, Root.Open("../")CVE-2025-228747.5Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected cer CVE-2025-22887.8A local code execution vulnerability exists in the Rockwell Automation Arena® due to a threat actor being able to write outside of the alloc CVE-2025-228807.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based bu CVE-2025-228817.8Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based bu CVE-2025-228829.8Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage CVE-2025-228839.8Delta Electronics ISPSoft version 3.20 is vulnerable to an Out-Of-Bounds Write vulnerability that could allow an attacker to execute arbitra CVE-2025-228849.8Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute