Description (CNA)
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| golang.org/x/crypto / golang.org/x/crypto/ssh | affected 0 before 0.35.0 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.