Поиск уязвимостей
Количество 10
Количество 10
CVE-2025-26466
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
CVE-2025-26466
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
CVE-2025-26466
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
CVE-2025-26466
Openssh: denial-of-service in openssh
CVE-2025-26466
A flaw was found in the OpenSSH package. For each ping packet the SSH ...
GHSA-m92w-x6j2-5gc5
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
BDU:2025-01893
Уязвимость сервера средства криптографической защиты OpenSSH, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:0585-1
Security update for openssh
ALT-PU-2025-3025
ALT-PU-2025-3025: package `openssh-gostcrypto` update to version 9.6p1-alt3.gost
ALT-PU-2025-3001
ALT-PU-2025-3001: package `openssh` update to version 9.6p1-alt3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-26466 A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack. | CVSS3: 5.9 | 39% Средний | больше 1 года назад |
 | CVE-2025-26466 A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack. | CVSS3: 5.9 | 39% Средний | больше 1 года назад |
 | CVE-2025-26466 A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack. | CVSS3: 5.9 | 39% Средний | больше 1 года назад |
 | CVE-2025-26466 Openssh: denial-of-service in openssh | CVSS3: 5.9 | 39% Средний | больше 1 года назад |
| CVE-2025-26466 A flaw was found in the OpenSSH package. For each ping packet the SSH ... | CVSS3: 5.9 | 39% Средний | больше 1 года назад |
| GHSA-m92w-x6j2-5gc5 A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack. | CVSS3: 5.9 | 39% Средний | больше 1 года назад |
 | BDU:2025-01893 Уязвимость сервера средства криптографической защиты OpenSSH, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.9 | 39% Средний | больше 1 года назад |
 | SUSE-SU-2025:0585-1 Security update for openssh | больше 1 года назад | ||
| ALT-PU-2025-3025 ALT-PU-2025-3025: package `openssh-gostcrypto` update to version 9.6p1-alt3.gost | CVSS3: 6.8 | больше 1 года назад | |
| ALT-PU-2025-3001 ALT-PU-2025-3001: package `openssh` update to version 9.6p1-alt3 | CVSS3: 6.8 | больше 1 года назад |
Уязвимостей на страницу