A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
CVSS Details
- CVSS 3.1 Base Score: 6.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade openssh-ldapUpgrade openssh-keycatUpgrade openssh-askpassUpgrade opensshUpgrade openssh-clientsUpgrade openssh-cavs | Jun 6, 2025 | Feb 18, 2025 |
| Alpine Linux | — | Upgrade openssh | Aug 8, 2025 | Feb 18, 2025 |
| Amazon Linux Ami 2 | — | Upgrade openssh-clientsUpgrade openssh-ldapUpgrade pam_ssh_agent_authUpgrade openssh-serverUpgrade openssh-server-sysvinitUpgrade opensshUpgrade openssh-debuginfoUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-cavs | Mar 10, 2025 | Feb 18, 2025 |
| Amazon_linux_2023 | — | Upgrade openssh-server-debuginfoUpgrade openssh-debuginfoUpgrade opensshUpgrade openssh-clients-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-serverUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-clients | Mar 10, 2025 | Feb 17, 2025 |
| Apple Osx Openssh | — | Upgrade macOS to the latest version | May 13, 2025 | May 12, 2025 |
| Debian | — | Upgrade openssh | Feb 20, 2025 | Feb 18, 2025 |
| Freebsd | — | Upgrade openssh-portable-gssapiUpgrade openssh-portableUpgrade openssh-portable-hpnUpgrade FreeBSD | Feb 25, 2025 | Feb 24, 2025 |
| Gentoo Linux | — | Upgrade net-misc/openssh. | Feb 20, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade opensshUpgrade openssh-clientsUpgrade openssh-server | May 13, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | Apr 11, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade openssh-clientsUpgrade openssh-serverUpgrade openssh | May 7, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade openssh-clientsUpgrade opensshUpgrade openssh-server | Jun 11, 2025 | Feb 18, 2025 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openssh-serverUpgrade opensshUpgrade openssh-clients | Jan 8, 2026 | Jan 7, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory18 | Mar 18, 2025 | Feb 18, 2025 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Dec 4, 2025 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Mar 10, 2025 | Feb 18, 2025 |
| Oracle_linux | — | Upgrade openssh-cavsUpgrade openssh-clientsUpgrade openssh-askpassUpgrade openssh-keycatUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-serverUpgrade openssh-ldap | May 26, 2025 | Feb 17, 2025 |
| Redhat_linux | — | Upgrade openssh-keycat-debuginfoUpgrade opensshUpgrade openssh-keycatUpgrade openssh-ldap-debuginfoUpgrade openssh-debugsourceUpgrade pam_ssh_agent_authUpgrade openssh-askpassUpgrade openssh-ldapUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-serverUpgrade openssh-clientsUpgrade openssh-debuginfoNo solution existsUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-cavs | Apr 15, 2025 | Feb 18, 2025 |
| Rocky_linux | — | Upgrade openssh-debugsourceUpgrade openssh-cavs-debuginfoUpgrade openssh-ldapUpgrade openssh-askpass-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-server-debuginfoUpgrade openssh-clientsUpgrade openssh-serverUpgrade openssh-debuginfoUpgrade openssh-askpassUpgrade openssh-keycat-debuginfoUpgrade opensshUpgrade openssh-clients-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-cavsUpgrade openssh-ldap-debuginfoUpgrade openssh-keycat | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade openssh8.4-helpersUpgrade openssh-cavsUpgrade openssh-server-config-disallow-rootloginUpgrade openssh8.4-clientsUpgrade openssh-askpass-gnomeUpgrade opensshUpgrade openssh8.4-commonUpgrade openssh-commonUpgrade openssh-clientsUpgrade openssh8.4-fipsUpgrade openssh8.4Upgrade openssh-fipsUpgrade openssh-helpersUpgrade openssh-serverUpgrade openssh-server-config-rootloginUpgrade openssh8.4-server | Feb 20, 2025 | Feb 18, 2025 |
| Ubuntu | — | Upgrade openssh-client (Ubuntu Pro)Upgrade openssh-server (Ubuntu Pro)Upgrade openssh-clientUpgrade openssh-server | Feb 20, 2025 | Feb 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Feb 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub