POC详情： 30b982f87cab4c1e9c22e5fa14f411339a276e38

来源
https://github.com/rxerium/CVE-2025-26466
关联漏洞
标题： OpenSSH: 开放式SSH中的拒绝服务漏洞 (CVE-2025-26466)
描述：在OpenSSH软件包中发现了一个漏洞。对于SSH服务器接收到的每个ping包，都会在内存缓冲区中分配一个pong包并存储在包队列中。这些包仅在服务器/客户端密钥交换完成后才被释放。恶意客户端可以持续发送此类包，导致服务器端内存占用无限制增加。因此，服务器可能会变得不可用，从而引发拒绝服务攻击。
描述
 The OpenSSH client and server are vulnerable to a pre-authentication DoS attack between versions 9.5p1 to 9.9p1 (inclusive) that causes memory and CPU consumption
介绍
# CVE-2025-26466

## How does this detection method work?

This template matches on the following vulnerable versions:
```
          - "SSH-2.0-OpenSSH_9.5p1"
          - "SSH-2.0-OpenSSH_9.6p1"
          - "SSH-2.0-OpenSSH_9.7p1"
          - "SSH-2.0-OpenSSH_9.8p1"
          - "SSH-2.0-OpenSSH_9.9p1"
```
If there is a match, the host is considered to be vulnerable to CVE-2025-26466.

 ## How do I run this script?

1. Download Nuclei from [here](https://github.com/projectdiscovery/nuclei)
2. Copy the template to your local system
3. Run the following command: `nuclei -u https://yourHost.com -t template.yaml` 

## References

- https://thehackernews.com/2025/02/new-openssh-flaws-enable-man-in-middle.html


## Disclaimer

Use at your own risk, I will not be responsible for illegal activities you conduct on infrastructure you do not own or have permission to scan.

## Contact

Feel free to reach out to me on [Signal](https://signal.me/#eu/0Qd68U1ivXNdWCF4hf70UYFo7tB0w-GQqFpYcyV6-yr4exn2SclB6bFeP7wTAxQw).
文件快照

 [4.0K]  /data/pocs/30b982f87cab4c1e9c22e5fa14f411339a276e38
├── [1017]  README.md
└── [ 656]  template.yaml

0 directories, 2 files
神龙机器人已为您缓存
备注
    1. 建议优先通过来源进行访问。
    2. 如果因为来源失效或无法访问，请发送邮箱到 f.jinxu#gmail.com 索取本地快照（把 # 换成 @）。
    3. 神龙已为您对POC代码进行快照，为了长期维护，请考虑为本地POC付费，感谢您的支持。