Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2025-26466

Openssh: denial-of-service in openssh

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenSSH

Default version status: unaffected

  • 9.5p1 to ≤ 9.9p1affected

Red Hat Red Hat Enterprise Linux 10

Default version status: affected

  • 0:9.9p1-7.el10_0 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:8.7p1-45.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:8.7p1-45.el9 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: unaffected

Red Hat Red Hat OpenShift Container Platform 4

Default version status: unaffected

References