PT-2025-23508 · Sslh+1 · Sslh+1

Matthias Gerstner · Published 2025-06-02 · Updated 2025-06-17 · CVE-2025-46806

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions sslh versions prior to 2.2.4

Description A Use of Out-of-range Pointer Offset issue in sslh leads to denial of service on some architectures.

Recommendations For versions prior to 2.2.4, update to version 2.2.4 or later to resolve the issue.

Fix

DoS

LPE

Weakness Enumeration

CWE-823

Related Identifiers

CVE-2025-46806

OPENSUSE-SU-2025:15194-1

Affected Products

Debian

Sslh

References · 20

• https://nvd.nist.gov/vuln/detail/CVE-2025-46806 · Security Note
• https://osv.dev/vulnerability/CVE-2025-46806 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-46806 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-46806 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-46806 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-46806 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-46806 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15194-1 · Vendor Advisory
• https://github.com/yrutschle/sslh/releases/tag/v2.2.4 · Note
• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46806 · Note
• https://twitter.com/CVEnew/status/1929525898073575755 · Twitter Post
• https://t.me/cvetracker/25175 · Telegram Post
• https://reddit.com/r/pwnhub/comments/1ldqd84/new_sslh_vulnerabilities_enable_remote · Reddit Post
• https://bugzilla.suse.com/show_bug.cgi?id=1243120 · Note
• https://twitter.com/oss_security/status/1933730201378177213 · Twitter Post