Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service herbeizufürhen oder seine Rechte auszuweiten.
Product
OpenSSH ist eine Open Source Implementierung des Secure Shell Protokolls.
Vulnerabilities 11
-
Medium 6.5
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during deco…
-
Medium 4.2
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended loc…
-
Low 3.7
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the…
-
Low 3.6
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but …
-
Low 3.1
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which is…
-
Low 2.9
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpecte…
-
Low 2.5
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
-
Low 2.5
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mis…
-
Low 2.5
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwa…
-
Low 2.2
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authenticat…
-
Low 2.2
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentic…
Revision history
-
#7
Neue Updates von Red Hat aufgenommen
-
#6
Neue Updates von IBM aufgenommen
-
#5
Neue Updates von Fedora aufgenommen
-
#4
Neue Updates von Fedora aufgenommen
-
#3
Neue Updates von Red Hat aufgenommen
-
#2
Neue Updates von Ubuntu aufgenommen
-
#1
Initiale Fassung
References
-
OpenSSH Release Notes vom 2026-10-06
https://www.openssh.org/releasenotes.html#10.6
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-8WPC-X9XG-9Q94
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-74G8-X9G6-GWMC
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-8FMQ-PFXF-6HMC
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-JRJW-PC9R-C624
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-J4H6-744F-Q3HQ
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-9HQ3-HC6P-GC8Q
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-9XXF-58MH-Q784
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-J45V-7HGC-XV9X
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-2XXV-M3RC-RVRM
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-695P-3Q57-GFF4
-
GitHub Advisory Database vom 2026-10-06
https://github.com/advisories/GHSA-99HR-WQ4P-X49Q
-
Ubuntu Security Notice USN-8928-1 vom 2026-10-14
https://ubuntu.com/security/notices/USN-8928-1
-
Red Hat Security Advisory RHSA-2026:84849 vom 2026-10-19
https://access.redhat.com/errata/RHSA-2026:84849
-
Fedora Security Advisory FEDORA-2026-A2ED02274A vom 2026-10-22
https://bodhi.fedoraproject.org/updates/FEDORA-2026-a2ed02274a
-
Fedora Security Advisory FEDORA-2026-1A3AE49D07 vom 2026-10-22
https://bodhi.fedoraproject.org/updates/FEDORA-2026-1a3ae49d07
-
IBM Security Bulletin 7295553 vom 2026-11-04
https://www.ibm.com/support/pages/node/7295553
-
Red Hat Security Advisory RHSA-2026:99573 vom 2026-11-12
https://access.redhat.com/errata/RHSA-2026:99573