What’s Vulnerable › Vulnerabilities

CVE-2025-46806: Misaligned Memory Accesses in `is_openvpn_protocol()`

• Severity: medium (CVSS 6.9 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-02 · updated 2026-06-17
• Weakness: CWE-823

Description

A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4.

Affected products

• https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslh: from ? before 2.2.4 — fixed in 2.2.4

How to fix

Upgrade to a fixed version: https://github.com/yrutschle/sslh/releases/tag/v2.2.4 sslh 2.2.4. Check the vendor advisory for mitigations.

References

• https://bugzilla.suse.com/show_bug.cgi?id=CVE-2025-46806
• https://github.com/yrutschle/sslh/releases/tag/v2.2.4

Get alerted when CVE-2025-46806 or the next vulnerability affects your stack