CVE-2025-26466
CWE-770 — Allocation without LimitsCWE-400 — Uncontrolled Resource Consumption15 documents12 sources
Severity
5.9MEDIUM
EPSS
60.4%
top 1.72%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 28
Latest updateMay 12
Description
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 2.2 | Impact: 3.6
Affected Packages2 packages
Also affects: Debian Linux 11.0, 12.0, 13.0, Ubuntu Linux 24.04, 24.10