Skip to content
OpenAdvisories

Weakness (CWE)

CWE-514: Covert Channel

Class Incomplete

A covert channel is a path that can be used to transfer information in a way not intended by the system's designers.

Source: MITRE CWE-514

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low 3.7
    CVE-2026-106582

    In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the…

    OpenBSD OpenSSH openssh openssh Debian Ubuntu
  • Low 3.7
    CVE-2026-42768

    Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

    Issue summary: The CMS_decrypt and PKCS7_decrypt functions are vulnerable to Bleichenbacher-style attack when an attacker is able to provide the CMS or S/MIME messages and observe the error code and/or decryption output. Impact summary: The Bleichenbacher-sty…

    OpenSSL OpenSSL openssl nodejs Debian Ubuntu Alpine