PT-2025-23504 · Sslh+1 · Sslh+1

Matthias Gerstner · Published 2025-06-02 · Updated 2025-06-17 · CVE-2025-46807

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions sslh versions prior to 2.2.4

Description A resource allocation issue without limits or throttling in sslh allows attackers to exhaust file descriptors, denying service to legitimate users. This issue can be exploited to impact user service through resource exhaustion attacks.

Recommendations For versions prior to 2.2.4, update to version 2.2.4 or later to resolve the issue. As a temporary workaround, consider implementing measures to limit resource allocation and prevent exhaustion attacks.

Fix

DoS

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

BDU:2026-00160

CVE-2025-46807

OPENSUSE-SU-2025:15194-1

Affected Products

Debian

Sslh

References · 25

• https://osv.dev/vulnerability/CVE-2025-46807 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-46807 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46807 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-46807 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46807 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00160 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15194-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-46807 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-46807 · Vendor Advisory
• https://github.com/yrutschle/sslh/releases/tag/v2.2.4 · Note
• https://twitter.com/CVEnew/status/1929503451941372083 · Twitter Post
• https://twitter.com/The_Cyber_News/status/1935019869440983171 · Twitter Post
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46807 · Note
• https://twitter.com/CveFindCom/status/1929503550641430625 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1ldqd84/new_sslh_vulnerabilities_enable_remote · Reddit Post