debian/sslh vulnerabilities

Latest debian/sslh CVEs

Newest publication first

1. DLA-4238-1 sslh - security update

   Published 2025-07-09

   Unknown

2. CVE-2025-52936 Improper Link Resolution Before File Access vulnerability in yrutschle/sslh

   Published 2025-06-23

   Critical·CVSS 9.3 EPSS 0.20%

   Improper Link Resolution Before File Access ('Link Following') vulnerability in yrutschle sslh.This issue affects sslh: before 2.2.2.

3. CVE-2025-46806 Misaligned Memory Accesses in `is_openvpn_protocol()`

   Published 2025-06-02

   Medium·CVSS 6.9 EPSS 0.47%

   A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4.

4. CVE-2025-46807 File Descriptor Exhaustion in sslh-select and sslh-ev triggers SEGFAULT

   Published 2025-06-02

   High·CVSS 8.7 EPSS 0.44%

   A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4.

5. CVE-2022-4639 sslh Packet Dumping probe.c hexdump format string

   Published 2022-12-21

   Critical·CVSS 9.8 EPSS 0.93%

   A vulnerability, which was classified as critical, has been found in sslh. This issue affects the function hexdump of the file probe.c of the component Packet Dumping Handler. The manipulation of the argument msg_info leads to format string. The attack may be initiated remotely....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.