What is the CVSS score of CVE-2025-46807?

CVE-2025-46807 has a CVSS 4.0 base score of 8.7 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N. EPSS exploitation probability: 0.1%.

Which versions of Red Hat are affected by CVE-2025-46807?

CVE-2025-46807 is a denial-of-service vulnerability affecting sslh (an SSL/SSH multiplexer) that allows attackers to exhaust system resources and block legitimate users from accessing services.. A patch is available.

How to fix or mitigate CVE-2025-46807?

Within 24 hours: Inventory all systems running sslh and document versions; assess exposure in production environments and implement network-level access controls to trusted sources only. Within 7 days: Deploy rate limiting and connection throttling at the network perimeter; consider load balancer rules to detect and drop suspicious connection patterns; evaluate upgrade timeline for sslh once patch is released. Within 30 days: Upgrade to sslh 2.2.4 or later as soon as patch becomes available; conduct post-patch validation testing; review and optimize resource allocation policies for the sslh service.

Red Hat CVE-2025-46807

EUVD-2025-16631 HIGH

Allocation of Resources Without Limits or Throttling (CWE-770)

2025-06-02 meissner@suse.de

Information Disclosure Red Hat Suse

8.7

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

8.7 HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Ubuntu

MEDIUM

qualitative

SUSE

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.3 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

EUVD ID Assigned

Mar 14, 2026 - 16:47 euvd

EUVD-2025-16631

Analysis Generated

Mar 14, 2026 - 16:47 vuln.today

CVE Published

Jun 02, 2025 - 12:15 nvd

HIGH 8.7

DescriptionCVE.org

A Allocation of Resources Without Limits or Throttling vulnerability in sslh allows attackers to easily exhaust the file descriptors in sslh and deny legitimate users service.This issue affects sslh before 2.2.4.

AnalysisAI

A remote code execution vulnerability in A Allocation of Resources Without Limits or Throttling vulnerability in sslh (CVSS 8.7) that allows attackers. High severity vulnerability requiring prompt remediation.

Technical ContextAI

Vulnerability type: remote code execution. CVSS 8.7 indicates high severity. Affects A Allocation of Resources Without Limits or Throttling vulnerability in sslh.

RemediationAI

Monitor vendor channels for patch availability.

Same weakness CWE-770 – Allocation of Resources Without Limits or Throttling

View all

CVE-2017-8779 HIGH POC

7.5

CVE-2025-53521 CRITICAL POC

9.3

CVE-2017-5850 HIGH POC

7.5

CVE-2025-26682 HIGH

7.5

CVE-2025-26466 MEDIUM

5.9

CVE-2020-37067 CRITICAL POC

9.8

CVE-2021-47875 CRITICAL POC

9.8

CVE-2023-38507 CRITICAL POC

9.8

Same technique Information Disclosure

View all

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

CVE-2023-7028 CRITICAL POC

10.0

CVE-2017-0213 HIGH POC

7.3

Vendor StatusVendor

Ubuntu

Priority: Medium

sslh

Release	Status	Version
xenial	needs-triage	-
bionic	needs-triage	-
focal	needs-triage	-
jammy	needs-triage	-
noble	needs-triage	-
upstream	needs-triage	-
oracular	ignored	end of life, was needs-triage
plucky	ignored	end of life, was needs-triage
questing	needs-triage	-

Debian

Bug #1107213

sslh

Release	Status	Fixed Version	Urgency
bullseye (security)	vulnerable	1.20-1+deb11u1	-
bookworm, bullseye	vulnerable	1.20-1	-
forky, sid, trixie	vulnerable	2.1.4-1	-
(unstable)	fixed	(unfixed)	-

SUSE

Severity: High

Product	Status
SUSE Package Hub 15 SP6	Fixed
openSUSE Leap 15.6	Fixed
openSUSE Tumbleweed	Fixed
SUSE Package Hub 15 SP6	Fixed

CVE-2025-46807 vulnerability details – vuln.today

Back

Red Hat CVE-2025-46807

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same weakness CWE-770 – Allocation of Resources Without Limits or Throttling

Same technique Information Disclosure

Vendor StatusVendor

Ubuntu

Debian

SUSE

Share

External POC / Exploit Code