CVE-2025-8277

CVE-2025-8277 is a libssh issue where the KEX memory is not freed during repeated incorrect KEX guesses, causing a memory leak that can crash the client. Connected sources confirm this vulnerability and note fixes/newer releases. Affected versions include libssh prior to the patched line (e.g., u...

OpenSSH kex_input_kexinit Denial of Service (CVE-2016-8858)

A denial of service vulnerability has been reported in OpenSSH. The vulnerability is due to improper implementation of the kexinputkexinit function in the kex module allowing the function to be repeated after receipt of a message. A remote attacker could exploit this vulnerability by sending...