CVE-2025-46807 File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT

A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4...

CVE-2025-46807 File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT

A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4...

CVE-2025-46807

CVE-2025-46807 affects the sslh project (sslh, an application protocol multiplexer). The flaw is an Allocation of Resources Without Limits or Throttling that allows attackers to exhaust file descriptors and cause a denial of service. Impact described as high availability impact due to resource ex...

PT-2025-23508 · Sslh +1 · Sslh +1

Name of the Vulnerable Software and Affected Versions: sslh versions prior to 2.2.4 Description: A Use of Out-of-range Pointer Offset issue in sslh leads to denial of service on some architectures. Recommendations: For versions prior to 2.2.4, update to version 2.2.4 or later to resolve the issue...

sslh 安全漏洞

sslh is an application protocol multiplexer by the individual developer Yves Rutschle. A security vulnerability exists in sslh versions prior to 2.2.4, which stems from out-of-bounds pointer offsets and may result in a denial of service...

sslh 安全漏洞

sslh is an application protocol multiplexer by the individual developer Yves Rutschle. A security vulnerability exists in sslh versions prior to 2.2.4, which stems from an unrestricted resource allocation that could lead to file descriptor exhaustion and denial of service...

OPENSUSE-SU-2025:15194-1 sslh-2.2.4-1.1 on GA media

These are all security issues fixed in the sslh-2.2.4-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15069-1 sslh-2.2.3-1.1 on GA media

These are all security issues fixed in the sslh-2.2.3-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2022-4639

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

CVE-2022-4639

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

Format string

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

UBUNTU-CVE-2022-4639

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

CVE-2022-4639

CVE-2022-4639 affects sslh, specifically the hexdump function in probe.c of the Packet Dumping Handler. The issue is a format string vulnerability caused by manipulating the msg_info argument, potentially allowing remote exploitation. Patch b19f8a6046b080e4c2e28354a58556bb26040c6f fixes this issu...

CVE-2022-4639 sslh Packet Dumping probe.c hexdump format string

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

CVE-2022-4639 sslh Packet Dumping probe.c hexdump format string

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

CVE-2022-4639

A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msginfo leads to format string. The attack may be initiated remotely. The name of the...

Applicative Protocol Multiplexer: SSLH

sslh accepts connections on specified ports, and forwards them further based on tests performed on the first data packet sent by the remote client. Probes for HTTP, SSL, SSH, OpenVPN, tinc, XMPP are implemented, and any other protocol that can be tested using a regular expression, can be...