CVE-2008-0852: Freesshd

Medium severity, CVSS 5.0. EPSS: 6.2% chance of exploitation in the next 30 days.

freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2_MSG_NEWKEYS packet to TCP port 22, which triggers a NULL pointer dereference.

Affected products

• Freesshd Freesshd: up to and including 1.2

Published 2008-02-21. Last modified 2026-06-16.