Resource Exhaustion Vulnerability in sslh Affects Numerous Users
CVE-2025-46807

8.7HIGH

What is CVE-2025-46807?

A resource exhaustion vulnerability in sslh permits attackers to deplete available file descriptors, leading to service denial for legitimate users. This issue impacts versions of sslh prior to 2.2.4, allowing malicious actors to overwhelm the system's resources, disrupting normal operations and access.

Affected Version(s)

sslh ? < 2.2.4

References

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Matthias Gerstner, SUSE
.