A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-serverUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade opensshUpgrade openssh-clientsUpgrade openssh-cavsUpgrade openssh-askpass | Jun 6, 2025 | Feb 18, 2025 |
| Alpine Linux | — | Upgrade openssh | Aug 8, 2025 | Feb 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade openssh-ldapUpgrade openssh-serverUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-debuginfoUpgrade openssh-cavsUpgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-server-sysvinitUpgrade openssh | Mar 10, 2025 | Feb 18, 2025 |
| Amazon_linux_2023 | — | Upgrade openssh-clientsUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade openssh-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-serverUpgrade openssh-keycat-debuginfoUpgrade opensshUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-debugsourceUpgrade openssh-clients-debuginfo | Mar 10, 2025 | Feb 17, 2025 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | May 13, 2025 | May 12, 2025 |
| Debian | — | Upgrade openssh | Feb 20, 2025 | Feb 18, 2025 |
| Freebsd | — | Upgrade FreeBSDUpgrade openssh-portableUpgrade openssh-portable-hpnUpgrade openssh-portable-gssapi | Feb 25, 2025 | Feb 24, 2025 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Feb 20, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openssh-clientsUpgrade opensshUpgrade openssh-server | May 13, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-clientsUpgrade opensshUpgrade openssh-server | Apr 11, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade opensshUpgrade openssh-serverUpgrade openssh-clients | May 7, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-server | Jun 11, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade opensshUpgrade openssh-serverUpgrade openssh-clients | Jan 8, 2026 | Jan 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory18 | Mar 18, 2025 | Feb 18, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 4, 2025 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Mar 10, 2025 | Feb 18, 2025 |
| Oracle_linux | — | Upgrade openssh-serverUpgrade openssh-ldapUpgrade openssh-keycatUpgrade opensshUpgrade openssh-cavsUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-clients | May 26, 2025 | Feb 17, 2025 |
| Redhat_linux | — | Upgrade openssh-ldapUpgrade openssh-debugsourceUpgrade openssh-ldap-debuginfoUpgrade openssh-askpassUpgrade openssh-keycatUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-keycat-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-cavsUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-askpass-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-serverUpgrade openssh-clientsNo solution exists | Apr 15, 2025 | Feb 18, 2025 |
| Rocky_linux | — | Upgrade openssh-serverUpgrade openssh-cavs-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-debugsourceUpgrade openssh-server-debuginfoUpgrade openssh-cavsUpgrade openssh-ldap-debuginfoUpgrade openssh-askpassUpgrade pam_ssh_agent_auth-debuginfoUpgrade opensshUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-keycatUpgrade openssh-keycat-debuginfo | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade openssh-askpass-gnomeUpgrade openssh-commonUpgrade opensshUpgrade openssh-server-config-disallow-rootloginUpgrade openssh8.4-helpersUpgrade openssh-clientsUpgrade openssh8.4-fipsUpgrade openssh8.4-commonUpgrade openssh-cavsUpgrade openssh8.4Upgrade openssh8.4-clientsUpgrade openssh-server-config-rootloginUpgrade openssh-helpersUpgrade openssh8.4-serverUpgrade openssh-serverUpgrade openssh-fips | Feb 20, 2025 | Feb 18, 2025 |
| Ubuntu | — | Upgrade openssh-server (Ubuntu Pro)Upgrade openssh-client (Ubuntu Pro)Upgrade openssh-clientUpgrade openssh-server | Feb 20, 2025 | Feb 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub