A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-clientsUpgrade openssh-cavsUpgrade openssh-askpassUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-ldapUpgrade openssh-server | Jun 6, 2025 | Feb 18, 2025 |
| Alpine Linux | — | Upgrade openssh | Aug 8, 2025 | Feb 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-debuginfoUpgrade openssh-server-sysvinitUpgrade opensshUpgrade openssh-cavsUpgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade openssh-ldapUpgrade openssh-clients | Mar 10, 2025 | Feb 18, 2025 |
| Amazon_linux_2023 | — | Upgrade openssh-serverUpgrade openssh-debugsourceUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-server-debuginfoUpgrade opensshUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade openssh-clients | Mar 10, 2025 | Feb 17, 2025 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | May 13, 2025 | May 12, 2025 |
| Debian | — | Upgrade openssh | Feb 20, 2025 | Feb 18, 2025 |
| Freebsd | — | Upgrade openssh-portable-hpnUpgrade openssh-portableUpgrade openssh-portable-gssapiUpgrade FreeBSD | Feb 25, 2025 | Feb 24, 2025 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Feb 20, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openssh-clientsUpgrade opensshUpgrade openssh-server | May 13, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-serverUpgrade opensshUpgrade openssh-clients | Apr 11, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | May 7, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-server | Jun 11, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade opensshUpgrade openssh-serverUpgrade openssh-clients | Jan 8, 2026 | Jan 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory18 | Mar 18, 2025 | Feb 18, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 4, 2025 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Mar 10, 2025 | Feb 18, 2025 |
| Oracle_linux | — | Upgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-cavsUpgrade opensshUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-ldapUpgrade openssh-server | May 26, 2025 | Feb 17, 2025 |
| Redhat_linux | — | Upgrade openssh-askpassUpgrade openssh-keycatUpgrade openssh-ldap-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-keycat-debuginfoUpgrade opensshUpgrade openssh-debugsourceUpgrade openssh-ldapUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavsUpgrade openssh-serverUpgrade openssh-clientsUpgrade openssh-clients-debuginfoNo solution existsUpgrade openssh-debuginfo | Apr 15, 2025 | Feb 18, 2025 |
| Rocky_linux | — | Upgrade openssh-cavsUpgrade openssh-ldap-debuginfoUpgrade openssh-askpassUpgrade openssh-debuginfoUpgrade openssh-clients-debuginfoUpgrade opensshUpgrade openssh-keycat-debuginfoUpgrade openssh-keycatUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-serverUpgrade openssh-clientsUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-server-debuginfoUpgrade openssh-debugsource | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade openssh8.4-serverUpgrade openssh-server-config-rootloginUpgrade openssh-helpersUpgrade openssh-serverUpgrade openssh-fipsUpgrade openssh-askpass-gnomeUpgrade opensshUpgrade openssh-clientsUpgrade openssh8.4-fipsUpgrade openssh8.4Upgrade openssh8.4-clientsUpgrade openssh-cavsUpgrade openssh-commonUpgrade openssh-server-config-disallow-rootloginUpgrade openssh8.4-helpersUpgrade openssh8.4-common | Feb 20, 2025 | Feb 18, 2025 |
| Ubuntu | — | Upgrade openssh-clientUpgrade openssh-serverUpgrade openssh-client (Ubuntu Pro)Upgrade openssh-server (Ubuntu Pro) | Feb 20, 2025 | Feb 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub