What is the CVSS score of CVE-2025-46806?

CVE-2025-46806 has a CVSS 4.0 base score of 6.9 (Medium). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.1%.

Which versions of Ubuntu are affected by CVE-2025-46806?

Organizations using sslh leads to denial of service on some architectures.This issue affects sslh should be aware of notable risk from CVE-2025-46806 rated CVSS 6.9.. A patch is available.

How to fix or mitigate CVE-2025-46806?

Within 30 days: Identify affected systems running sslh leads to denial of service on some architectures.This i and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Ubuntu CVE-2025-46806

EUVD-2025-16646 MEDIUM

Use of Out-of-range Pointer Offset (CWE-823)

2025-06-02 meissner@suse.de

Denial Of Service Memory Corruption Ubuntu Debian Suse

6.9

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

6.9 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Ubuntu

MEDIUM

qualitative

SUSE

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 14, 2026 - 16:47 euvd

EUVD-2025-16646

Analysis Generated

Mar 14, 2026 - 16:47 vuln.today

CVE Published

Jun 02, 2025 - 13:15 nvd

MEDIUM 6.9

DescriptionCVE.org

A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4.

Analysis

A Use of Out-of-range Pointer Offset vulnerability in sslh leads to denial of service on some architectures.This issue affects sslh before 2.2.4.

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Use of Out-of-range Pointer Offset (CWE-823).

RemediationAI

Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.

Same weakness CWE-823 – Use of Out-of-range Pointer Offset

View all

CVE-2016-2161 HIGH

7.5

CVE-2022-0729 HIGH POC

8.8

CVE-2026-41907 HIGH POC

8.1

CVE-2021-3889 HIGH POC

8.1

CVE-2021-3888 HIGH POC

8.1

CVE-2022-0685 HIGH POC

7.8

CVE-2020-6112 HIGH POC

7.8

CVE-2024-42383 CRITICAL

9.8

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

Ubuntu

Priority: Medium

sslh

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
upstream	needs-triage	-
oracular	ignored	end of life, was needs-triage
plucky	ignored	end of life, was needs-triage
questing	needs-triage	-

Debian

Bug #1107214

sslh

Release	Status	Fixed Version	Urgency
bullseye (security)	fixed	1.20-1+deb11u1	-
bookworm, bullseye	fixed	1.20-1	-
forky, sid, trixie	vulnerable	2.1.4-1	-
bullseye	not-affected	-	-
bookworm	not-affected	-	-
(unstable)	fixed	(unfixed)	-

SUSE

Severity: Medium

Product	Status
SUSE Package Hub 15 SP6	Fixed
openSUSE Leap 15.6	Fixed
openSUSE Tumbleweed	Fixed
SUSE Package Hub 15 SP6	Fixed

CVE-2025-46806 vulnerability details – vuln.today

Back

Ubuntu CVE-2025-46806

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

Analysis

Technical ContextAI

RemediationAI

Same weakness CWE-823 – Use of Out-of-range Pointer Offset

Same technique Denial Of Service

Vendor StatusVendor

Ubuntu

Debian

SUSE

Share

External POC / Exploit Code