Lucene search
+L

6 matches found

RedHat Linux
RedHat Linux
added 2025/09/26 1:5 a.m.12 views

openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS7.1AI score0.07449EPSS
Exploits4References6
Tenable Nessus
Tenable Nessus
added 2025/02/27 12:0 a.m.24 views

CBL Mariner 2.0 Security Update: openssh (CVE-2025-26465)

The version of openssh installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-26465 advisory. - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle...

6.8CVSS7AI score0.07449EPSS
Exploits4References2
NVD
NVD
added 2025/02/18 7:15 p.m.34 views

CVE-2025-26465

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS0.07449EPSS
Exploits4References27
Cvelist
Cvelist
added 2025/02/18 6:27 p.m.276 views

CVE-2025-26465 Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS0.07449EPSS
Exploits4References8
Vulnrichment
Vulnrichment
added 2025/02/18 6:27 p.m.21 views

CVE-2025-26465 Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS6.6AI score0.07449EPSS
Exploits4References8
RedhatCVE
RedhatCVE
added 2025/02/18 11:22 a.m.16 views

CVE-2025-26465

A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. Fo...

6.8CVSS6.4AI score0.07449EPSS
Exploits4References3
Rows per page
Query Builder