Summary
Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2025-22869: SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux · 2 | amazon-ssm-agent | 0:3.3.2299.0-1.amzn2 |
Vulnerabilities 1
-
High 7.5
Potential denial of service in golang.org/x/crypto
SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.
References
-
web
https://alas.aws.amazon.com/cve/html/CVE-2025-22869.html