A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
[POC] CVE-2025-26466 — CVE-2025-26466
OpenSSH server 9.5p1 - 9.9p1 DoS (PoC)
[POC] CVE-2025-26465 — patch-manual-CVE-2025-26465-e-CVE-2025-26466
Patch Manual para a correção das CVE-2025-26465-e-CVE-2025-26466, para sistemas sem update do OpenSSH
[POC] CVE-2025-26466 — CVE-2025-26466
poc for CVE-2025-26466
[POC] CVE-2025-26466 — CVE-2025-26466-msf
CVE-2025-26466 .rb module for msfconsole
[POC] CVE-2025-26466 — CVE-2025-26466
The OpenSSH client and server are vulnerable to a pre-authentication DoS attack between versions 9.5p1 to 9.9p1 (inclusive) that causes memory and CPU consumption
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free