6.8
CVE-2025-26465
- EPSS 7%
- Veröffentlicht 18.02.2025 19:15:29
- Zuletzt bearbeitet 12.05.2026 13:16:40
- Quelle secalert@redhat.com
- CVE-Watchlists
- Unerledigt
LoginOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabled
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Netapp ≫ Active Iq Unified Manager Version- SwPlatformvmware_vsphere
Redhat ≫ Openshift Container Platform Version4.0
Debian ≫ Debian Linux Version11.0
Debian ≫ Debian Linux Version12.0
Redhat ≫ Enterprise Linux Version9.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7% | 0.933 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.8 | 1.6 | 5.2 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
|
| secalert@redhat.com | 6.8 | 1.6 | 5.2 |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
|
CWE-390 Detection of Error Condition Without Action
The product detects a specific error, but takes no actions to handle the error.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://access.redhat.com/security/cve/CVE-2025-26465
https://bugzilla.redhat.com/show_bug.cgi?id=2344780
https://blog.qualys.com/vulnerabilities-threat-research/2025/02/18/qualys-tru-discovers-two-vulnerabilities-in-openssh-cve-2025-26465-cve-2025-26466
https://bugzilla.suse.com/show_bug.cgi?id=1237040
https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/008_ssh.patch.sig
https://lists.debian.org/debian-lts-announce/2025/02/msg00020.html
https://lists.mindrot.org/pipermail/openssh-unix-announce/2025-February/000161.html
https://security-tracker.debian.org/tracker/CVE-2025-26465
https://security.netapp.com/advisory/ntap-20250228-0003/
https://ubuntu.com/security/CVE-2025-26465
https://www.openssh.com/releasenotes.html#9.9p2
https://www.openwall.com/lists/oss-security/2025/02/18/1
https://www.openwall.com/lists/oss-security/2025/02/18/4
https://www.theregister.com/2025/02/18/openssh_vulnerabilities_mitm_dos/
https://seclists.org/oss-sec/2025/q1/144
https://www.vicarius.io/vsociety/posts/cve-2025-26465-detect-vulnerable-openssh
https://www.vicarius.io/vsociety/posts/cve-2025-26465-mitigate-vulnerable-openssh
https://access.redhat.com/errata/RHSA-2025:3837
https://access.redhat.com/errata/RHSA-2025:6993
https://access.redhat.com/errata/RHSA-2025:8385
https://access.redhat.com/errata/RHSA-2025:16823
https://access.redhat.com/solutions/7109879
http://seclists.org/fulldisclosure/2025/May/7
http://seclists.org/fulldisclosure/2025/May/8
http://seclists.org/fulldisclosure/2025/Feb/18
https://cert-portal.siemens.com/productcert/html/ssa-082556.html