PT-2025-47531 · Ssh Agent+2 · Ssh-Agent+2

Jakub Ciolek · Published 2025-11-19 · Updated 2026-06-16 · CVE-2025-47914

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions SSH Agent (affected versions not specified)

Description SSH Agent servers do not properly check the size of messages when handling new identity requests. This can lead to a program crash, specifically a panic, if a deliberately crafted, malformed message causes an out-of-bounds read.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-14682

CLEANSTART-2026-AD41794

CLEANSTART-2026-AD71344

CLEANSTART-2026-AQ65185

CLEANSTART-2026-AZ24638

CLEANSTART-2026-AZ32516

CLEANSTART-2026-BB83999

CLEANSTART-2026-BD18029

CLEANSTART-2026-BG69533

CLEANSTART-2026-BM53321

CLEANSTART-2026-BS24435

CLEANSTART-2026-BY71381

CLEANSTART-2026-CK35256

CLEANSTART-2026-CN84623

CLEANSTART-2026-CO68219

CLEANSTART-2026-DB61851

CLEANSTART-2026-DK45320

CLEANSTART-2026-DM19620

CLEANSTART-2026-DO31246

CLEANSTART-2026-DP35743

CLEANSTART-2026-DS01292

CLEANSTART-2026-DS30740

CLEANSTART-2026-DT92404

CLEANSTART-2026-EI44621

CLEANSTART-2026-EJ58111

CLEANSTART-2026-EJ93145

CLEANSTART-2026-ER42900

CLEANSTART-2026-FJ56296

CLEANSTART-2026-FN26367

CLEANSTART-2026-FR97108

CLEANSTART-2026-FX27781

CLEANSTART-2026-FZ55932

CLEANSTART-2026-GB02436

CLEANSTART-2026-GC72145

CLEANSTART-2026-GG58376

CLEANSTART-2026-GR41888

CLEANSTART-2026-GU55430

CLEANSTART-2026-GV85693

CLEANSTART-2026-GY48351

CLEANSTART-2026-HA09227

CLEANSTART-2026-HK06185

CLEANSTART-2026-HQ88036

CLEANSTART-2026-HX97842

CLEANSTART-2026-HZ73294

CLEANSTART-2026-IL25782

CLEANSTART-2026-IW23933

CLEANSTART-2026-IY77127

CLEANSTART-2026-JW59894

CLEANSTART-2026-JX46109

CLEANSTART-2026-KC06686

CLEANSTART-2026-KT28044

CLEANSTART-2026-KV78041

CLEANSTART-2026-KY75084

CLEANSTART-2026-LD14062

CLEANSTART-2026-LI47669

CLEANSTART-2026-LL43287

CLEANSTART-2026-LO63022

CLEANSTART-2026-LS00044

CLEANSTART-2026-LS08172

CLEANSTART-2026-LS30652

CLEANSTART-2026-LU81821

CLEANSTART-2026-MF20926

CLEANSTART-2026-MI12470

CLEANSTART-2026-MO53190

CLEANSTART-2026-NC32267

CLEANSTART-2026-NG75665

CLEANSTART-2026-OD47693

CLEANSTART-2026-OH86281

CLEANSTART-2026-OI10284

CLEANSTART-2026-OM95908

CLEANSTART-2026-OU18540

CLEANSTART-2026-PC16040

CLEANSTART-2026-PV93827

CLEANSTART-2026-PW33232

CLEANSTART-2026-PW47027

CLEANSTART-2026-PY36202

CLEANSTART-2026-QI02196

CLEANSTART-2026-QI35149

CLEANSTART-2026-QJ89068

CLEANSTART-2026-QM19832

CLEANSTART-2026-QN98167

CLEANSTART-2026-QP84300

CLEANSTART-2026-QW16951

CLEANSTART-2026-QZ70444

CLEANSTART-2026-RU00721

CLEANSTART-2026-RX06615

CLEANSTART-2026-SM37781

CLEANSTART-2026-SO13464

CLEANSTART-2026-SQ68600

CLEANSTART-2026-SV79070

CLEANSTART-2026-TF33105

CLEANSTART-2026-TN07413

CLEANSTART-2026-TO88856

CLEANSTART-2026-TS54009

CLEANSTART-2026-UD61879

CLEANSTART-2026-UH39784

CLEANSTART-2026-UY81473

CLEANSTART-2026-UZ17701

CLEANSTART-2026-WA03785

CLEANSTART-2026-WE92783

CLEANSTART-2026-WK88787

CLEANSTART-2026-WP20592

CLEANSTART-2026-WQ07901

CLEANSTART-2026-XR17407

CLEANSTART-2026-XV54160

CLEANSTART-2026-YC48827

CLEANSTART-2026-YD51202

CLEANSTART-2026-YG94604

CLEANSTART-2026-YU60015

CLEANSTART-2026-ZD89666

CLEANSTART-2026-ZP68963

CVE-2025-47914

ECHO-66D8-8AEA-2DE6

GHSA-F6X5-JH6R-WRFV

GO-2025-4135

OPENSUSE-RU-2026:20010-1

OPENSUSE-SU-2025:15771-1

OPENSUSE-SU-2025:15773-1

OPENSUSE-SU-2025:15852-1

OPENSUSE-SU-2025:20143-1

OPENSUSE-SU-2025:20177-1

OPENSUSE-SU-2026:10013-1

OPENSUSE-SU-2026:10042-1

OPENSUSE-SU-2026:10302-1

OPENSUSE-SU-2026:20080-1

OPENSUSE-SU-2026:20132-1

OPENSUSE-SU-2026:20305-1

OPENSUSE-SU-2026:20438-1

OPENSUSE-SU-2026:20730-1

OPENSUSE-SU-2026:20788-1

OPENSUSE-SU-2026:20798-1

OPENSUSE-SU-2026:20902-1

RHSA-2026:7291

RHSA-2026:7385

SUSE-SU-2025:4526-1

SUSE-SU-2025:4536-1

SUSE-SU-2026:0014-1

SUSE-SU-2026:0067-1

SUSE-SU-2026:0125-1

SUSE-SU-2026:0439-1

SUSE-SU-2026:20035-1

SUSE-SU-2026:20123-1

SUSE-SU-2026:20176-1

SUSE-SU-2026:20244-1

SUSE-SU-2026:20357-1

SUSE-SU-2026:20451-1

SUSE-SU-2026:20626-1

SUSE-SU-2026:20641-1

SUSE-SU-2026:20656-1

SUSE-SU-2026:20949-1

SUSE-SU-2026:20976-1

SUSE-SU-2026:21291-1

SUSE-SU-2026:21756-1

SUSE-SU-2026:21827-1

SUSE-SU-2026:2400-1

SUSE-SU-2026:2401-1

Affected Products

Debian

Red Os

Ssh-Agent

References · 734

• https://nvd.nist.gov/vuln/detail/CVE-2025-64329 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-26958 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-BB83999 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-UD61879 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-68121 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-TS54009 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-SM37781 · Vendor Advisory
• https://pkg.go.dev/vuln/GO-2025-4135 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20451-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-32280 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22869 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-39883 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10302-1 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-ZP68963 · Vendor Advisory
• https://osv.dev/vulnerability/CLEANSTART-2026-AD71344 · Vendor Advisory