Back to Database
Status published
Unknown
CVE-2025-58181
Unbounded memory consumption in golang.org/x/crypto/ssh
Vulnerability Description
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58181
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Jakub Ciolek
References
More from golang.org/x/crypto
View All →CVE-2025-47914
Malformed constraint may cause denial of service in golang.org/x/crypto/ssh/agent
Unknown
0
CVE-2025-47913
Potential denial of service in golang.org/x/crypto/ssh/agent
Unknown
0
CVE-2025-22869
Potential denial of service in golang.org/x/crypto
Unknown
0
CVE-2024-45337
Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto
Unknown
0
CVE-2022-30636
Limited directory traversal vulnerability on Windows in golang.org/x/crypto
Unknown
0
Affected Vendor
golang.org/x/crypto
View all reports →Affected Software
golang.org/x/crypto/ssh
Vulnerable Versions:
0
Timeline
Official Publish:
November 19th, 2025
Last Modified:
November 20th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.