SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
| Platform | Package | Release Date | Advisory |
|---|---|---|---|
| Amazon Linux 2 - Aws-nitro-enclaves-cli Extra | docker | 2025-04-09 19:43 | ALAS2NITRO-ENCLAVES-2025-053 |
| Amazon Linux 2 - Docker Extra | docker | 2025-04-09 19:43 | ALAS2DOCKER-2025-056 |
| Amazon Linux 2 - Ecs Extra | docker | 2025-04-09 19:43 | ALAS2ECS-2025-054 |
| Amazon Linux 2023 | docker | 2025-04-09 19:43 | ALAS2023-2025-934 |
| Amazon Linux 2 - Docker Extra | runfinch-finch | 2025-03-26 19:21 | ALAS2DOCKER-2025-053 |
| Amazon Linux 2023 | runfinch-finch | 2025-03-26 20:44 | ALAS2023-2025-914 |
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| NVD | CVSSv3 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
