{"id":5741,"date":"2025-02-18T17:32:20","date_gmt":"2025-02-18T17:32:20","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/new-openssh-flaws-patch-now\/"},"modified":"2025-02-18T17:32:21","modified_gmt":"2025-02-18T17:32:21","slug":"new-openssh-flaws-patch-now","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/new-openssh-flaws-patch-now\/","title":{"rendered":"New OpenSSH Flaws: Patch Now"},"content":{"rendered":"\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">February 18, 2025<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><span class=\"p-tags\">Vulnerability \/ Network Security<\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\">\n<a href=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhE70jiODdSyQ2yUz6vu1Nxs_xJ9WUOpw1IqiOiUH0-dgosq8JJbjCS3JJGMhl2PjNp2ZwrSYZE_iWapWN2tpd_z6PMC__mxw4QsLYESE6cma7gge5S6Oyn552CgolPzFnVqgWid9Bbl3l-XLYJUue7lu2YswJxXTnduNVxBNi9DbKRIaFhXo6_L_AjgnbE\/s728-rw-e365\/ssh.png\" style=\"clear: left; display: block; float: left;  text-align: center;\" rel=\"nofollow noopener\" target=\"_blank\"><\/p>\n<p><\/a>\n<\/div>\n<p>Researchers have identified two significant security vulnerabilities in OpenSSH, a widely-used secure networking utility suite. These vulnerabilities could potentially allow attackers to execute a machine-in-the-middle (MitM) attack and a denial-of-service (DoS) attack under specific conditions, if exploited successfully.<\/p>\n<p>The vulnerabilities, which were <a href=\"https:\/\/blog.qualys.com\/vulnerabilities-threat-research\/2025\/02\/18\/qualys-tru-discovers-two-vulnerabilities-in-openssh-cve-2025-26465-cve-2025-26466\" rel=\"noopener nofollow\" target=\"_blank\">detailed<\/a> by the Qualys Threat Research Unit (TRU), are outlined below:<\/p>\n<ul>\n<li><strong>CVE-2025-26465<\/strong> &#8211; A logic error exists in OpenSSH client versions 6.8p1 to 9.9p1 (inclusive), making it vulnerable to an active MitM attack if the VerifyHostKeyDNS option is enabled. This could allow a malicious attacker to impersonate a legitimate server when a client attempts to connect (Introduced in December 2014).<\/li>\n<li><strong>CVE-2025-26466<\/strong> &#8211; OpenSSH client and server versions 9.5p1 to 9.9p1 (inclusive) are vulnerable to a pre-authentication DoS attack, causing memory and CPU consumption (Introduced in August 2023).<\/li>\n<\/ul>\n<p>According to Saeed Abbasi, manager of product at Qualys TRU, &#8220;If an attacker can perform a man-in-the-middle attack via CVE-2025-26465, the client may accept the attacker&#8217;s key instead of the legitimate server&#8217;s key.&#8221; He further explained that this would compromise the integrity of the SSH connection, allowing potential interception or tampering with the session before the user even realizes it.<\/p>\n<div class=\"dog_two clear\">\n<center class=\"cf\"><br \/>\n<a href=\"https:\/\/thehackernews.uk\/saas-security-v1-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\" title=\"Cybersecurity\"><br \/>\n<img fetchpriority=\"high\" decoding=\"async\" class=\"lazyload\" alt=\"Cybersecurity\" src=\"https:\/\/blogger.googleusercontent.com\/img\/b\/R29vZ2xl\/AVvXsEhc0hgq4JZKi-PJjUZ4kdb5ficmXr3IPOg6noFF558_qZ-gXm7vb0OzXU0NzsPAxaqca2tLI5j8NgJW731W0_CuPrUerOmSrZSt4IeANQp6VAQsIAQUzv6aJsxBD6poxHfELq0bcbeevSVy5AyOb9ganALMoA140nZoLOtSb0ck2AZ5rZgb9mWDEyVsbvqK\/s728-rw-e100\/saas-security-v1-d.png\" width=\"727\" height=\"90\"\/><br \/>\n<\/a><br \/>\n<\/center>\n<\/div>\n<p>A successful exploitation of these vulnerabilities could allow malicious actors to compromise and hijack SSH sessions, gaining unauthorized access to sensitive data. It is essential to note that the VerifyHostKeyDNS option is disabled by default.<\/p>\n<p>On the other hand, repeated exploitation of CVE-2025-26466 could result in availability issues, preventing administrators from managing servers and locking legitimate users out, effectively crippling routine operations.<\/p>\n<p>OpenSSH maintainers have addressed both vulnerabilities in version OpenSSH 9.9p2, released today.<\/p>\n<p>This disclosure comes over seven months after Qualys shed light on another OpenSSH flaw dubbed <a href=\"https:\/\/thehackernews.com\/2024\/07\/new-openssh-vulnerability-could-lead-to.html\" rel=\"noopener nofollow\" target=\"_blank\">regreSSHion<\/a> (CVE-2024-6387), which could have resulted in unauthenticated remote code execution with root privileges in glibc-based Linux systems.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Found this article interesting?  Follow us on <a href=\"https:\/\/twitter.com\/thehackersnews\" rel=\"noopener nofollow\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a> and <a href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" rel=\"noopener nofollow\" target=\"_blank\">LinkedIn<\/a> to read more exclusive content we post.<\/div>\n<\/div>\n<p><script async src=\"\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/02\/new-openssh-flaws-enable-man-in-middle.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue802February 18, 2025\ue804Ravie LakshmananVulnerability \/ Network Security Researchers have identified two significant security vulnerabilities in OpenSSH, a widely-used secure networking utility suite. These vulnerabilities could potentially allow attackers to execute&#8230;<\/p>\n","protected":false},"author":19,"featured_media":5742,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-5741","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/02\/ssh.png","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/5741","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=5741"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/5741\/revisions"}],"predecessor-version":[{"id":5743,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/5741\/revisions\/5743"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/5742"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=5741"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=5741"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=5741"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}