GSSAPI Authentication Request Parsing Vulnerability in SSH Servers

CVE-2025-58181

What is CVE-2025-58181?

SSH servers that process GSSAPI authentication requests contain a vulnerability where the number of mechanisms specified in the request is not properly validated. This oversight means that an attacker could exploit this flaw to initiate excessive memory consumption, potentially leading to service disruptions and denial of service conditions. It is crucial for administrators to apply updates and monitor their systems for unusual behavior to mitigate this risk.

References