What is the CVSS score of CVE-2025-70034?

CVE-2025-70034 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Which versions of Ssh2 are affected by CVE-2025-70034?

CVE-2025-70034 affects the mscdex ssh2 library v1.17.0 and creates a denial-of-service risk through inefficient regex processing.

How to fix or mitigate CVE-2025-70034?

Within 24 hours: Identify all systems and applications using mscdex ssh2 v1.17.0 and assess exposure scope. Within 7 days: Implement network segmentation to restrict SSH access to trusted sources only and enable connection rate limiting on affected systems. Within 30 days: Upgrade to a patched version when available, or migrate to alternative SSH libraries with equivalent functionality.

Ssh2 CVE-2025-70034

HIGH

Inefficient Regular Expression Complexity (ReDoS) (CWE-1333)

2026-03-09 cve@mitre.org

Denial Of Service Ssh2

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Red Hat

6.5 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:56 vuln.today

CVE Published

Mar 09, 2026 - 18:16 nvd

HIGH 7.5

DescriptionCVE.org

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.

AnalysisAI

An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0. [CVSS 7.5 HIGH]

Technical ContextAI

Classified as CWE-1333 (Inefficient Regular Expression Complexity (ReDoS)). An issue pertaining to CWE-1333: Inefficient Regular Expression Complexity (4.19) was discovered in mscdex ssh2 v1.17.0.