This vulnerability arises from the Diffie-Hellman Key Agreement Protocol's handling of public key order validation when an approved safe prime is used. A remote client can exploit this by forcing the server to perform expensive modular-exponentiation calculations repeatedly, leading to asymmetric resource consumption and potential denial of service. The attack scenario requires the client to claim exclusive DHE communication capability and the server to be configured to accept DHE and perform public key order validation.

The impact is a high-severity denial of service condition caused by asymmetric resource consumption on the server side. There is no confidentiality or integrity impact. The server may become overwhelmed by computationally expensive operations triggered by a malicious client, potentially degrading service availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the meantime, consider reviewing server configurations related to DHE key agreement and public key order validation to limit exposure. Monitoring for unusual resource consumption patterns related to DHE operations may help detect exploitation attempts.