Red Hat Security Advisory: Red Hat OpenShift Builds 1.2
Red Hat OpenShift Builds 1.2
AI Analysis
Technical Summary
CVE-2025-22869 is a denial of service vulnerability in the golang.org/x/crypto/ssh package affecting SSH clients and servers. The flaw involves allocation of resources without limits or throttling (CWE-770), which can lead to memory exhaustion during the SSH key exchange phase if the other party is slow to respond. While both clients and servers are affected, practical exploitation is limited and mainly occurs during large file transfers. This vulnerability impacts Red Hat OpenShift Builds versions 1.1 through 1.2. The Red Hat advisory notes no fix is currently available but recommends connecting only to trusted servers as a mitigation.
Potential Impact
The vulnerability can cause denial of service by exhausting memory resources during SSH key exchange, potentially disrupting SSH client or server operations. There is no impact on confidentiality or integrity. The likelihood of exploitation is reduced due to the requirement of transferring large files and slow key exchange responses. No known exploits are reported in the wild.
Mitigation Recommendations
No official fix is currently available for this vulnerability. Red Hat recommends mitigating the risk by configuring SSH clients to connect only to trusted servers. Users should monitor Red Hat advisories for future updates or patches addressing this issue.
Red Hat Security Advisory: Red Hat OpenShift Builds 1.2
Description
Red Hat OpenShift Builds 1.2
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-22869 is a denial of service vulnerability in the golang.org/x/crypto/ssh package affecting SSH clients and servers. The flaw involves allocation of resources without limits or throttling (CWE-770), which can lead to memory exhaustion during the SSH key exchange phase if the other party is slow to respond. While both clients and servers are affected, practical exploitation is limited and mainly occurs during large file transfers. This vulnerability impacts Red Hat OpenShift Builds versions 1.1 through 1.2. The Red Hat advisory notes no fix is currently available but recommends connecting only to trusted servers as a mitigation.
Potential Impact
The vulnerability can cause denial of service by exhausting memory resources during SSH key exchange, potentially disrupting SSH client or server operations. There is no impact on confidentiality or integrity. The likelihood of exploitation is reduced due to the requirement of transferring large files and slow key exchange responses. No known exploits are reported in the wild.
Mitigation Recommendations
No official fix is currently available for this vulnerability. Red Hat recommends mitigating the risk by configuring SSH clients to connect only to trusted servers. Users should monitor Red Hat advisories for future updates or patches addressing this issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:4188
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-30204"]
Threat ID: 6a160972e29bf47b5063ab0f
Added to database: 05/26/2026, 20:58:26 UTC
Last enriched: 08/14/2026, 22:05:14 UTC
Last updated: 09/10/2026, 22:04:10 UTC
Views: 28
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.