CVE-2025-46807

HIGH

sslh < 2.2.4 - Denial of Service via File Descriptor Exhaustion

Title source: llm
STIX 2.1

Description

A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4.

References (2)

Core 2

Scores

CVSS v4 8.7
EPSS 0.0037
EPSS Percentile 29.1%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-770
Status published
Products (1)
https://github.com/yrutschle/sslh/releases/tag/v2.2.4/sslh ? - 2.2.4
Published Jun 02, 2025
Tracked Since Feb 18, 2026