Critical Vulnerabilities in OpenSSH (CVE-2025-26465, CVE-2025-26466)

Published On: Feb 21, 2025 11:05

Advisory No: TZCERT-SA-25-0062

Source: OpenSSH

Software Affected: ssh(1), sshd(8)

Overview

Two critical vulnerabilities are affecting OpenSSH. Exploitation of these vulnerabilities may allow an unauthenticated attacker to cause a denial-of-service condition.

Description

OpenSSH versions 6.8p1 to 9.9p1 are affected by vulnerabilities tracked as CVE-2025-26465, and CVE-2025-26466 with CVSS scores of 9.8 and 9.1. The vulnerabilities results from a logic error that allowed an on-path attacker (a.k.a MITM) to impersonate any server when the VerifyHostKeyDNS option is enabled, and a memory/CPU handling SSH2_MSG_PING packets. The vulnerabilities allow attackers to achieve man-in-the-middle (MitM) and a denial-of-service condition on affected system.

Impact

Successful exploitation of these vulnerabilities may allow the attackers to take control of affected system.

Solution

OpenSSH has released security patches for these vulnerabilities. Users and administrators are encouraged to apply necessary updates.

Subscribe To TZ - CERT Newsletter

A digest of Tanzania Computer Emergency Response Team coverage of cyber-security news across the globe.

Subscribe
Report Incident