CLEANSTART-2026-UU01575
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-UU01575.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2026-UU01575
- Upstream
- Published
- 2026-10-15T00:41:45Z
- Modified
- 2026-10-15T01:00:21Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
- Summary
- SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
- Details
-
CVE-2025-58181 affects multiple packages. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability details.
- References
Affected packages
CleanStart / ollama-fips
Package
- Name
- ollama-fips
- Purl
- pkg:apk/cleanstart/ollama-fips?arch=x86_64
CleanStart / ollama-fips
Package
- Name
- ollama-fips
- Purl
- pkg:apk/cleanstart/ollama-fips?arch=aarch64
CleanStart / prometheus-mysqld-exporter
Package
- Name
- prometheus-mysqld-exporter
- Purl
- pkg:apk/cleanstart/prometheus-mysqld-exporter