Skip to content
OpenAdvisories

Package · Alpine

wolfssh

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-84897

    wolfSSH server accepts server-to-client DH group exchange messages from an unauthenticated client, causing pre-authentication primality-test CPU exhaustion and key exchange role confusion

    src/internal.c in wolfSSL wolfSSH through 1.5.0 admits the server-to-client Diffie-Hellman group exchange messages SSH_MSG_KEX_DH_GEX_GROUP (31) and SSH_MSG_KEX_DH_GEX_REPLY (33) when a server receives them from an unauthenticated client. IsMessageAllowedServ…

    wolfSSL wolfSSH wolfssh Alpine
  • Medium 5.3
    CVE-2026-83742

    wstrncat() unsigned integer underflow leads to an off-by-one null write in wolfSSH on non-Windows platforms

    Unsigned integer underflow in wstrncat() in src/port.c in wolfSSL wolfSSH from v1.4.11 through v1.5.0 on non-Windows platforms allows an authenticated remote attacker to write one out-of-bounds null byte past the end of a stack buffer by sending a crafted SFT…

    wolfSSL wolfSSH wolfssh Alpine
  • Medium 6.3
    CVE-2026-81535

    wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check

    In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen() in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allo…

    wolfSSL wolfSSH wolfssh Alpine