CVE-2025-26465
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2025-26465
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-26465.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-26465
- Related
- Published
- 2025-02-18T19:15:29Z
- Modified
- 2025-03-10T22:58:41.171043Z
- Severity
-
- 6.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
- References
-
- https://security.netapp.com/advisory/ntap-20250228-0003/
- https://blog.qualys.com/vulnerabilities-threat-research/2025/02/18/qualys-tru-discovers-two-vulnerabilities-in-openssh-cve-2025-26465-cve-2025-26466
- https://www.openwall.com/lists/oss-security/2025/02/18/1
- https://www.openwall.com/lists/oss-security/2025/02/18/4
- https://seclists.org/oss-sec/2025/q1/144
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.6/common/008_ssh.patch.sig
- https://bugzilla.redhat.com/show_bug.cgi?id=2344780
- https://bugzilla.suse.com/show_bug.cgi?id=1237040
- https://access.redhat.com/security/cve/CVE-2025-26465
- https://lists.debian.org/debian-lts-announce/2025/02/msg00020.html
- https://lists.mindrot.org/pipermail/openssh-unix-announce/2025-February/000161.html
- https://security-tracker.debian.org/tracker/CVE-2025-26465
- https://ubuntu.com/security/CVE-2025-26465
- https://www.openssh.com/releasenotes.html#9.9p2
- https://www.theregister.com/2025/02/18/openssh_vulnerabilities_mitm_dos/
- https://www.vicarius.io/vsociety/posts/cve-2025-26465-detect-vulnerable-openssh
- https://www.vicarius.io/vsociety/posts/cve-2025-26465-mitigate-vulnerable-openssh
- https://security.alpinelinux.org/vuln/CVE-2025-26465
Affected packages
Alpine:v3.18 / openssh
Package
- Name
- openssh
- Purl
- pkg:apk/alpine/openssh?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed9.3_p2-r3
Affected versions
5.*
5.1p1-r0
5.1_p1-r1
5.1_p1-r2
5.2_p1-r0
5.2_p1-r1
5.2_p1-r2
5.2_p1-r3
5.3_p1-r3
5.4_p1-r0
5.4_p1-r1
5.4_p1-r2
5.4_p1-r3
5.5_p1-r0
5.6_p1-r0
5.6_p1-r1
5.8_p1-r0
5.8_p1-r1
5.8_p1-r2
5.8_p2-r0
5.8_p2-r1
5.8_p2-r2
5.9_p1-r0
5.9_p1-r1
5.9_p1-r2
6.*
6.0_p1-r0
6.1_p1-r0
6.1_p1-r1
6.1_p1-r2
6.2_p1-r0
6.2_p2-r0
6.2_p2-r1
6.2_p2-r2
6.3_p1-r0
6.3_p1-r1
6.3_p1-r2
6.4_p1-r0
6.4_p1-r1
6.6_p1-r0
6.6_p1-r1
6.6_p1-r2
6.6_p1-r3
6.6_p1-r4
6.6_p1-r5
6.6_p1-r6
6.7_p1-r0
6.8_p1-r0
6.8_p1-r1
6.8_p1-r2
6.9_p1-r0
6.9_p1-r1
6.9_p1-r2
6.9_p1-r3
6.9_p1-r4
6.9_p1-r5
7.*
7.1_p1-r0
7.1_p1-r1
7.1_p2-r0
7.2_p1-r0
7.2_p2-r0
7.2_p2-r1
7.3_p1-r0
7.3_p1-r1
7.3_p1-r2
7.4_p1-r0
7.4_p1-r1
7.4_p1-r2
7.5_p1-r0
7.5_p1-r1
7.5_p1-r2
7.5_p1-r3
7.5_p1-r4
7.5_p1-r5
7.5_p1-r6
7.5_p1-r7
7.5_p1-r8
7.6_p1-r0
7.6_p1-r1
7.7_p1-r0
7.7_p1-r1
7.7_p1-r2
7.7_p1-r3
7.7_p1-r4
7.8_p1-r0
7.9_p1-r0
7.9_p1-r1
7.9_p1-r2
7.9_p1-r3
7.9_p1-r4
7.9_p1-r5
8.*
8.0_p1-r0
8.0_p1-r1
8.0_p1-r2
8.1_p1-r0
8.2_p1-r0
8.3_p1-r0
8.4_p1-r0
8.4_p1-r1
8.4_p1-r2
8.4_p1-r3
8.5_p1-r0
8.5_p1-r1
8.5_p1-r2
8.6_p1-r0
8.6_p1-r1
8.6_p1-r2
8.6_p1-r3
8.6_p1-r4
8.8_p1-r0
8.8_p1-r1
8.8_p1-r2
8.8_p1-r3
8.8_p1-r4
8.9_p1-r0
9.*
9.0_p1-r0
9.0_p1-r1
9.0_p1-r2
9.0_p1-r3
9.0_p1-r4
9.1_p1-r0
9.1_p1-r1
9.2_p1-r0
9.2_p1-r1
9.2_p1-r2
9.2_p1-r3
9.2_p1-r4
9.3_p1-r0
9.3_p1-r1
9.3_p1-r2
9.3_p1-r3
9.3_p2-r0
9.3_p2-r1
9.3_p2-r2
Alpine:v3.19 / openssh
Package
- Name
- openssh
- Purl
- pkg:apk/alpine/openssh?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed9.6_p1-r2
Affected versions
5.*
5.1p1-r0
5.1_p1-r1
5.1_p1-r2
5.2_p1-r0
5.2_p1-r1
5.2_p1-r2
5.2_p1-r3
5.3_p1-r3
5.4_p1-r0
5.4_p1-r1
5.4_p1-r2
5.4_p1-r3
5.5_p1-r0
5.6_p1-r0
5.6_p1-r1
5.8_p1-r0
5.8_p1-r1
5.8_p1-r2
5.8_p2-r0
5.8_p2-r1
5.8_p2-r2
5.9_p1-r0
5.9_p1-r1
5.9_p1-r2
6.*
6.0_p1-r0
6.1_p1-r0
6.1_p1-r1
6.1_p1-r2
6.2_p1-r0
6.2_p2-r0
6.2_p2-r1
6.2_p2-r2
6.3_p1-r0
6.3_p1-r1
6.3_p1-r2
6.4_p1-r0
6.4_p1-r1
6.6_p1-r0
6.6_p1-r1
6.6_p1-r2
6.6_p1-r3
6.6_p1-r4
6.6_p1-r5
6.6_p1-r6
6.7_p1-r0
6.8_p1-r0
6.8_p1-r1
6.8_p1-r2
6.9_p1-r0
6.9_p1-r1
6.9_p1-r2
6.9_p1-r3
6.9_p1-r4
6.9_p1-r5
7.*
7.1_p1-r0
7.1_p1-r1
7.1_p2-r0
7.2_p1-r0
7.2_p2-r0
7.2_p2-r1
7.3_p1-r0
7.3_p1-r1
7.3_p1-r2
7.4_p1-r0
7.4_p1-r1
7.4_p1-r2
7.5_p1-r0
7.5_p1-r1
7.5_p1-r2
7.5_p1-r3
7.5_p1-r4
7.5_p1-r5
7.5_p1-r6
7.5_p1-r7
7.5_p1-r8
7.6_p1-r0
7.6_p1-r1
7.7_p1-r0
7.7_p1-r1
7.7_p1-r2
7.7_p1-r3
7.7_p1-r4
7.8_p1-r0
7.9_p1-r0
7.9_p1-r1
7.9_p1-r2
7.9_p1-r3
7.9_p1-r4
7.9_p1-r5
8.*
8.0_p1-r0
8.0_p1-r1
8.0_p1-r2
8.1_p1-r0
8.2_p1-r0
8.3_p1-r0
8.4_p1-r0
8.4_p1-r1
8.4_p1-r2
8.4_p1-r3
8.5_p1-r0
8.5_p1-r1
8.5_p1-r2
8.6_p1-r0
8.6_p1-r1
8.6_p1-r2
8.6_p1-r3
8.6_p1-r4
8.8_p1-r0
8.8_p1-r1
8.8_p1-r2
8.8_p1-r3
8.8_p1-r4
8.9_p1-r0
9.*
9.0_p1-r0
9.0_p1-r1
9.0_p1-r2
9.0_p1-r3
9.0_p1-r4
9.1_p1-r0
9.1_p1-r1
9.2_p1-r0
9.2_p1-r1
9.2_p1-r2
9.2_p1-r3
9.2_p1-r4
9.3_p1-r0
9.3_p1-r1
9.3_p1-r2
9.3_p1-r3
9.3_p1-r4
9.3_p1-r5
9.3_p1-r6
9.3_p1-r7
9.3_p2-r0
9.3_p2-r1
9.3_p2-r2
9.4_p1-r0
9.5_p1-r0
9.6_p1-r0
9.6_p1-r1
Alpine:v3.20 / openssh
Package
- Name
- openssh
- Purl
- pkg:apk/alpine/openssh?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed9.7_p1-r5
Affected versions
5.*
5.1p1-r0
5.1_p1-r1
5.1_p1-r2
5.2_p1-r0
5.2_p1-r1
5.2_p1-r2
5.2_p1-r3
5.3_p1-r3
5.4_p1-r0
5.4_p1-r1
5.4_p1-r2
5.4_p1-r3
5.5_p1-r0
5.6_p1-r0
5.6_p1-r1
5.8_p1-r0
5.8_p1-r1
5.8_p1-r2
5.8_p2-r0
5.8_p2-r1
5.8_p2-r2
5.9_p1-r0
5.9_p1-r1
5.9_p1-r2
6.*
6.0_p1-r0
6.1_p1-r0
6.1_p1-r1
6.1_p1-r2
6.2_p1-r0
6.2_p2-r0
6.2_p2-r1
6.2_p2-r2
6.3_p1-r0
6.3_p1-r1
6.3_p1-r2
6.4_p1-r0
6.4_p1-r1
6.6_p1-r0
6.6_p1-r1
6.6_p1-r2
6.6_p1-r3
6.6_p1-r4
6.6_p1-r5
6.6_p1-r6
6.7_p1-r0
6.8_p1-r0
6.8_p1-r1
6.8_p1-r2
6.9_p1-r0
6.9_p1-r1
6.9_p1-r2
6.9_p1-r3
6.9_p1-r4
6.9_p1-r5
7.*
7.1_p1-r0
7.1_p1-r1
7.1_p2-r0
7.2_p1-r0
7.2_p2-r0
7.2_p2-r1
7.3_p1-r0
7.3_p1-r1
7.3_p1-r2
7.4_p1-r0
7.4_p1-r1
7.4_p1-r2
7.5_p1-r0
7.5_p1-r1
7.5_p1-r2
7.5_p1-r3
7.5_p1-r4
7.5_p1-r5
7.5_p1-r6
7.5_p1-r7
7.5_p1-r8
7.6_p1-r0
7.6_p1-r1
7.7_p1-r0
7.7_p1-r1
7.7_p1-r2
7.7_p1-r3
7.7_p1-r4
7.8_p1-r0
7.9_p1-r0
7.9_p1-r1
7.9_p1-r2
7.9_p1-r3
7.9_p1-r4
7.9_p1-r5
8.*
8.0_p1-r0
8.0_p1-r1
8.0_p1-r2
8.1_p1-r0
8.2_p1-r0
8.3_p1-r0
8.4_p1-r0
8.4_p1-r1
8.4_p1-r2
8.4_p1-r3
8.5_p1-r0
8.5_p1-r1
8.5_p1-r2
8.6_p1-r0
8.6_p1-r1
8.6_p1-r2
8.6_p1-r3
8.6_p1-r4
8.8_p1-r0
8.8_p1-r1
8.8_p1-r2
8.8_p1-r3
8.8_p1-r4
8.9_p1-r0
9.*
9.0_p1-r0
9.0_p1-r1
9.0_p1-r2
9.0_p1-r3
9.0_p1-r4
9.1_p1-r0
9.1_p1-r1
9.2_p1-r0
9.2_p1-r1
9.2_p1-r2
9.2_p1-r3
9.2_p1-r4
9.3_p1-r0
9.3_p1-r1
9.3_p1-r2
9.3_p1-r3
9.3_p1-r4
9.3_p1-r5
9.3_p1-r6
9.3_p1-r7
9.3_p2-r0
9.3_p2-r1
9.3_p2-r2
9.4_p1-r0
9.5_p1-r0
9.6_p1-r0
9.7_p1-r0
9.7_p1-r1
9.7_p1-r2
9.7_p1-r3
9.7_p1-r4
Alpine:v3.21 / openssh
Package
- Name
- openssh
- Purl
- pkg:apk/alpine/openssh?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed9.9_p2-r0
Affected versions
5.*
5.1p1-r0
5.1_p1-r1
5.1_p1-r2
5.2_p1-r0
5.2_p1-r1
5.2_p1-r2
5.2_p1-r3
5.3_p1-r3
5.4_p1-r0
5.4_p1-r1
5.4_p1-r2
5.4_p1-r3
5.5_p1-r0
5.6_p1-r0
5.6_p1-r1
5.8_p1-r0
5.8_p1-r1
5.8_p1-r2
5.8_p2-r0
5.8_p2-r1
5.8_p2-r2
5.9_p1-r0
5.9_p1-r1
5.9_p1-r2
6.*
6.0_p1-r0
6.1_p1-r0
6.1_p1-r1
6.1_p1-r2
6.2_p1-r0
6.2_p2-r0
6.2_p2-r1
6.2_p2-r2
6.3_p1-r0
6.3_p1-r1
6.3_p1-r2
6.4_p1-r0
6.4_p1-r1
6.6_p1-r0
6.6_p1-r1
6.6_p1-r2
6.6_p1-r3
6.6_p1-r4
6.6_p1-r5
6.6_p1-r6
6.7_p1-r0
6.8_p1-r0
6.8_p1-r1
6.8_p1-r2
6.9_p1-r0
6.9_p1-r1
6.9_p1-r2
6.9_p1-r3
6.9_p1-r4
6.9_p1-r5
7.*
7.1_p1-r0
7.1_p1-r1
7.1_p2-r0
7.2_p1-r0
7.2_p2-r0
7.2_p2-r1
7.3_p1-r0
7.3_p1-r1
7.3_p1-r2
7.4_p1-r0
7.4_p1-r1
7.4_p1-r2
7.5_p1-r0
7.5_p1-r1
7.5_p1-r2
7.5_p1-r3
7.5_p1-r4
7.5_p1-r5
7.5_p1-r6
7.5_p1-r7
7.5_p1-r8
7.6_p1-r0
7.6_p1-r1
7.7_p1-r0
7.7_p1-r1
7.7_p1-r2
7.7_p1-r3
7.7_p1-r4
7.8_p1-r0
7.9_p1-r0
7.9_p1-r1
7.9_p1-r2
7.9_p1-r3
7.9_p1-r4
7.9_p1-r5
8.*
8.0_p1-r0
8.0_p1-r1
8.0_p1-r2
8.1_p1-r0
8.2_p1-r0
8.3_p1-r0
8.4_p1-r0
8.4_p1-r1
8.4_p1-r2
8.4_p1-r3
8.5_p1-r0
8.5_p1-r1
8.5_p1-r2
8.6_p1-r0
8.6_p1-r1
8.6_p1-r2
8.6_p1-r3
8.6_p1-r4
8.8_p1-r0
8.8_p1-r1
8.8_p1-r2
8.8_p1-r3
8.8_p1-r4
8.9_p1-r0
9.*
9.0_p1-r0
9.0_p1-r1
9.0_p1-r2
9.0_p1-r3
9.0_p1-r4
9.1_p1-r0
9.1_p1-r1
9.2_p1-r0
9.2_p1-r1
9.2_p1-r2
9.2_p1-r3
9.2_p1-r4
9.3_p1-r0
9.3_p1-r1
9.3_p1-r2
9.3_p1-r3
9.3_p1-r4
9.3_p1-r5
9.3_p1-r6
9.3_p1-r7
9.3_p2-r0
9.3_p2-r1
9.3_p2-r2
9.4_p1-r0
9.5_p1-r0
9.6_p1-r0
9.7_p1-r0
9.7_p1-r1
9.7_p1-r2
9.7_p1-r3
9.8_p1-r0
9.8_p1-r1
9.9_p1-r0
9.9_p1-r1
9.9_p1-r2
Debian:11 / openssh
Package
- Name
- openssh
- Purl
- pkg:deb/debian/openssh?arch=source
Debian:12 / openssh
Package
- Name
- openssh
- Purl
- pkg:deb/debian/openssh?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:9.2p1-2+deb12u5
Debian:13 / openssh
Package
- Name
- openssh
- Purl
- pkg:deb/debian/openssh?arch=source
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed1:9.9p2-1
Affected versions
1:9.*
1:9.2p1-2
1:9.3p1-1
1:9.3p1-1+loong64
1:9.3p2-1
1:9.4p1-1
1:9.5p1-1
1:9.5p1-2
1:9.6p1-1
1:9.6p1-2
1:9.6p1-3
1:9.6p1-4
1:9.6p1-5
1:9.7p1-1
1:9.7p1-2
1:9.7p1-3
1:9.7p1-3+hurd.1
1:9.7p1-4
1:9.7p1-5
1:9.7p1-6
1:9.7p1-7
1:9.8p1-1
1:9.8p1-2
1:9.8p1-3
1:9.8p1-4
1:9.8p1-7
1:9.8p1-8
1:9.9p1-1
1:9.9p1-2
1:9.9p1-3
1:9.9p1-3+hurd.1