openssh-8.7p1-45.el9
エラータID: AXSA:2025-10048:02
リリース日:
2025/06/27 Friday - 15:10
題名:
openssh-8.7p1-45.el9
影響のあるチャネル:
MIRACLE LINUX 9 for x86_64
Severity:
Moderate
Description:
以下項目について対処しました。
[Security Fix]
- OpenSSH には、VerifyHostKeyDNS オプションが有効になっている
などの特定の状況下において、ホストキーを検証する際のエラーコード
の処理方法に問題があるため、リモートの攻撃者により、クライアント側
のメモリを枯渇させることを介して、中間者攻撃を可能とする脆弱性が
存在します。(CVE-2025-26465)
解決策:
パッケージをアップデートしてください。
CVE:
CVE-2025-26465
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage to exhaust the client's memory resource first, turning the attack complexity high.
追加情報:
N/A
ダウンロード:
SRPMS
- openssh-8.7p1-45.el9.src.rpm
MD5: a8f70147290749f89fc9f81ab4ccae58
SHA-256: cd2cd2d82af4290394a0605b869a369e4961e262b9c88337d2ab7163b5e3b2be
Size: 2.30 MB
Asianux Server 9 for x86_64
- openssh-8.7p1-45.el9.ML.1.x86_64.rpm
MD5: 906eacf1eea4d277413f7c986221c6e6
SHA-256: 0305e86ddbf4232a6fa11ae823b19a582de97572997b70936bbf64ec11ac9881
Size: 459.88 kB - openssh-askpass-8.7p1-45.el9.ML.1.x86_64.rpm
MD5: 26d8c48b34db496d85e16b579e59a16a
SHA-256: 16518d1bc00452ceb3f8b9bbf19e9f7a1fa7a4acb6a34a23b028bf5aa1f0508d
Size: 16.90 kB - openssh-clients-8.7p1-45.el9.ML.1.x86_64.rpm
MD5: d83c2976d7f9597c24924c91c814ffc3
SHA-256: 8d129bdf4c0179418c8b9c5b2a159728c40e45f6262e841513645c52a3e3cc0f
Size: 713.45 kB - openssh-keycat-8.7p1-45.el9.ML.1.x86_64.rpm
MD5: 2fcbe2bd11fbf27ad59f5b800062d39f
SHA-256: 165f47a1ad6ae48f9185f7b1f92fd0b37ca5714cf4ed653d6f8a41fdeb2815d4
Size: 18.42 kB - openssh-server-8.7p1-45.el9.ML.1.x86_64.rpm
MD5: 3ea7939fc62d7084de534f08295998a1
SHA-256: 7060ecf9fd76a8982726b77967f236565824b9356b699afc15abb6ab6526eed6
Size: 460.14 kB - pam_ssh_agent_auth-0.10.4-5.45.el9.ML.1.x86_64.rpm
MD5: bd02818ea47138aaf73d528b55b80a28
SHA-256: 4831e74892aea03f3c340ed61b0ca78ead3a35cf4339319c5eb4081ee7c3da74
Size: 65.21 kB
English