A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-keycatUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-serverUpgrade opensshUpgrade openssh-clientsUpgrade openssh-cavsUpgrade openssh-askpass | Jun 6, 2025 | Feb 18, 2025 |
| Alpine Linux | — | Upgrade openssh | Aug 8, 2025 | Feb 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade openssh-cavsUpgrade openssh-askpassUpgrade opensshUpgrade openssh-keycatUpgrade openssh-server-sysvinitUpgrade openssh-debuginfoUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-serverUpgrade openssh-ldap | Mar 10, 2025 | Feb 18, 2025 |
| Amazon_linux_2023 | — | Upgrade openssh-serverUpgrade pam_ssh_agent_auth-debuginfoUpgrade opensshUpgrade openssh-debugsourceUpgrade openssh-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-keycat | Mar 10, 2025 | Feb 17, 2025 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | May 13, 2025 | Feb 18, 2025 |
| Debian | — | Upgrade openssh | Feb 20, 2025 | Feb 18, 2025 |
| Freebsd | — | Upgrade openssh-portable-gssapiUpgrade openssh-portable-hpnUpgrade openssh-portableUpgrade FreeBSD | Feb 25, 2025 | Feb 24, 2025 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Feb 20, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openssh-serverUpgrade openssh-clientsUpgrade openssh | May 13, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-serverUpgrade opensshUpgrade openssh-clients | Apr 11, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade opensshUpgrade openssh-serverUpgrade openssh-clients | May 7, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade openssh-serverUpgrade opensshUpgrade openssh-clients | Jun 11, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-server | Jan 8, 2026 | Jan 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory18 | Mar 18, 2025 | Feb 18, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 4, 2025 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Mar 10, 2025 | Feb 18, 2025 |
| Oracle_linux | — | Upgrade openssh-keycatUpgrade openssh-cavsUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-ldapUpgrade openssh-server | May 26, 2025 | Feb 17, 2025 |
| Redhat_linux | — | Upgrade openssh-ldap-debuginfoUpgrade openssh-ldapUpgrade openssh-debugsourceUpgrade openssh-keycat-debuginfoUpgrade openssh-askpassUpgrade openssh-keycatUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-serverUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-askpass-debuginfoNo solution existsUpgrade openssh-cavsUpgrade openssh-cavs-debuginfoUpgrade openssh-debuginfoUpgrade openssh-clientsUpgrade openssh-clients-debuginfo | Apr 15, 2025 | Feb 18, 2025 |
| Rocky_linux | — | Upgrade openssh-clientsUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-cavs-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-debugsourceUpgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-ldap-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-keycatUpgrade openssh-cavs | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade openssh-cavsUpgrade openssh8.4Upgrade openssh-commonUpgrade openssh-askpass-gnomeUpgrade opensshUpgrade openssh-server-config-disallow-rootloginUpgrade openssh8.4-helpersUpgrade openssh8.4-clientsUpgrade openssh-clientsUpgrade openssh8.4-fipsUpgrade openssh8.4-commonUpgrade openssh-server-config-rootloginUpgrade openssh-helpersUpgrade openssh8.4-serverUpgrade openssh-serverUpgrade openssh-fips | Feb 20, 2025 | Feb 18, 2025 |
| Ubuntu | — | Upgrade openssh-serverUpgrade openssh-clientUpgrade openssh-client (Ubuntu Pro)Upgrade openssh-server (Ubuntu Pro) | Feb 20, 2025 | Feb 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub