Medium severity · published Nov 19, 2025
CVE-2025-58181
Unbounded memory consumption in golang.org/x/crypto/ssh
5.3
CVSS
0.6%
EPSS
No
On KEV
Description
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GO
golang.org/x/crypto/ssh · golang.org/x/crypto
before 0.45.0 · source: vendor
CR
Crypto · Golang
before 0.45.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-58181
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-58181
Patch
https://go.dev/cl/721961
Issue Tracking
https://go.dev/issue/76363
Mailing List
https://groups.google.com/g/golang-announce/c/w-oX3UxNcZA
Vendor Advisory
https://pkg.go.dev/vuln/GO-2025-4134
More from golang.org/x/crypto/ssh
10.0
CVE-2026-46595
Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
9.1
CVE-2026-39834
Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh
9.1
CVE-2026-39831
Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
9.1
CVE-2026-39830
Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
9.1
CVE-2024-45337
Misuse of connection.serverAuthenticate may cause authorization bypass in golang.org/x/crypto