Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2025-26466

Description

A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.

POC

Reference

- https://bugzilla.suse.com/show_bug.cgi?id=1237041

- https://seclists.org/oss-sec/2025/q1/144

- https://www.openwall.com/lists/oss-security/2025/02/18/1

- https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt

Github

- https://github.com/ARPSyndicate/cve-scores

- https://github.com/PuddinCat/GithubRepoSpider

- https://github.com/SirSeoPro/12-01

- https://github.com/Theshield-crack/wazuh-SIEM-with-ubuntu

- https://github.com/Theshield-crack/wazuh-SIEM-with-ubuntu-

- https://github.com/dolutech/patch-manual-CVE-2025-26465-e-CVE-2025-26466

- https://github.com/mosaicwang/myrpm

- https://github.com/mrowkoob/CVE-2025-26466-msf

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/pawan-shivarkar/List-of-CVE-s-

- https://github.com/pawan-shivarkar/pawan-shivarkar

- https://github.com/plzheheplztrying/cve_monitor

- https://github.com/rxerium/CVE-2025-26466