MediumFix available
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Type: advisorySources: OSV
CVE-2025-58181 affects multiple packages. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability details.
- Products
- ollama-fips, prometheus-redis-exporter-fips
- Affected versions
- Not specified
- Fixed versions
- 0.34.4-r4, 0.40.0-r3, 1.91.1-r1
- CVEs
- CVE-2025-58181
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 10:35 UTC · Revision 1
Source evidence
SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
core-osv · Original sourcePublished 9 Oct 2026, 00:36 UTC
CVE-2025-58181 affects multiple packages. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability details.
osv:CLEANSTART-2026-FE09696
prometheus-redis-exporter-fips
Fixed versions: 1.91.1-r1
ollama-fips
Fixed versions: 0.40.0-r3
ollama-fips
Fixed versions: 0.40.0-r3
ollama-fips
Fixed versions: 0.34.4-r4
ollama-fips
Fixed versions: 0.34.4-r4
Complete source record
{
"id": "ca281a3711ca47c2efa72ed8acd62ed3a6541c3ca1a39055bd553dc2913b4a65",
"url": "https://osv.dev/vulnerability/CLEANSTART-2026-FE09696",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption",
"summary": "CVE-2025-58181 affects multiple packages. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability details.",
"evidence": "osv:CLEANSTART-2026-FE09696",
"products": [
{
"name": {
"value": "prometheus-redis-exporter-fips",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "1.91.1-r1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ollama-fips",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.40.0-r3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ollama-fips",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.40.0-r3",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ollama-fips",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.34.4-r4",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "ollama-fips",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.34.4-r4",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
}
],
"severity": "medium",
"structured": {
"id": "CLEANSTART-2026-FE09696",
"aliases": [
"CLEANSTART-2026-FE09696"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.91.1-r1"
}
]
}
],
"package": {
"name": "prometheus-redis-exporter-fips",
"purl": "pkg:apk/cleanstart/prometheus-redis-exporter-fips",
"ecosystem": "CleanStart"
},
"database_specific": {
"source": "https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FE09696.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.40.0-r3"
}
]
}
],
"package": {
"name": "ollama-fips",
"purl": "pkg:apk/cleanstart/ollama-fips?arch=x86_64",
"ecosystem": "CleanStart"
},
"database_specific": {
"source": "https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FE09696.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.40.0-r3"
}
]
}
],
"package": {
"name": "ollama-fips",
"purl": "pkg:apk/cleanstart/ollama-fips?arch=aarch64",
"ecosystem": "CleanStart"
},
"database_specific": {
"source": "https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FE09696.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.34.4-r4"
}
]
}
],
"package": {
"name": "ollama-fips",
"purl": "pkg:apk/cleanstart/ollama-fips?arch=x86_64",
"ecosystem": "CleanStart"
},
"database_specific": {
"source": "https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FE09696.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.34.4-r4"
}
]
}
],
"package": {
"name": "ollama-fips",
"purl": "pkg:apk/cleanstart/ollama-fips?arch=aarch64",
"ecosystem": "CleanStart"
},
"database_specific": {
"source": "https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FE09696.json"
}
}
],
"modified": "2026-10-09T01:00:08.051192658Z",
"provider": "osv",
"upstream": [
"CVE-2025-58181"
],
"references": [
"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FE09696.json",
"https://osv.dev/vulnerability/CVE-2025-58181",
"https://nvd.nist.gov/vuln/detail/CVE-2025-58181"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2025-58181",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 108066,
"published_at": "2026-10-09T00:36:52.617+00:00"
}