Medium severity · published Jun 2, 2025
CVE-2025-46806
Misaligned Memory Accesses in `is_openvpn_protocol()`
6.9
CVSS
0.5%
EPSS
No
On KEV
Description
A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SS
sslh · https://github.com/yrutschle/sslh/releases/tag/v2.2.4
? before 2.2.4 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-46806
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-46806
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46806
github.com
https://github.com/yrutschle/sslh/releases/tag/v2.2.4
More from sslh
8.7
CVE-2025-46807
File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT