CVE-2025-58181
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.
- Published Nov 19, 2025
- CVSS 5.3 medium
- 0.6% chance of exploitation in the next 30 days (EPSS)
- A fix is available