CLEANSTART-2026-EA90663

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-EA90663.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-EA90663

Upstream

CVE-2025-58181

Published

2026-10-08T00:41:14Z

Modified

2026-10-08T16:46:44Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator

Summary

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Details

Security vulnerability affects the external-dns package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

References

Affected packages

CleanStart / external-dns

Package

Name: external-dns
Purl: pkg:apk/cleanstart/external-dns

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.20.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-EA90663.json"