Skip to content
OpenAdvisories

Vendor

OpenBSD

51 known vulnerabilities.

Products

OpenSSH 31 OpenBSD 13 LibreSSL 4 Kernel 2 src 1 OpenBSD 7.3 0 OpenBSD 7.1 0 OpenBSD 7.2 0 OpenBSD <= 6.5 0 OpenBSD < 7.3 errata 014 0 OpenBSD < 7.2 errata 001 0 OpenSMTPD 0 OpenBSD 7.4 0 OpenBSD < 7.0 errata 006 0 OpenBSD < 7.2 errata 026 0 OpenBSD < 7.3 errata 004 0
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.1
    CVE-2026-123158 Exploited Public exploit EPSS 17%

    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentic…

    OpenBSD OpenSSH openssh openssh Debian Ubuntu Alpine
    KEV Nov 9, 2026
  • High 7.7
    CVE-2026-60002

    ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This…

    OpenBSD OpenSSH openssh openssh Debian Ubuntu Alpine
  • High 7.4
    CVE-2026-57589

    sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a …

    OpenBSD OpenBSD
  • High 7.5
    CVE-2026-35385

    In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' …

    OpenBSD OpenSSH openssh openssh Debian Ubuntu Alpine
  • High 7.9
    CVE-2024-11149

    OpenBSD vmm GDTR limits

    In OpenBSD 7.4 before errata 014, vmm(4) did not restore GDTR limits properly on Intel (VMX) CPUs.

    OpenBSD OpenBSD
  • High 7.5
    CVE-2024-11148

    OpenBSD httpd(8) null dereference

    In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.

    OpenBSD OpenBSD
  • High 7.5
    CVE-2023-52558

    OpenBSD 7.4 and 7.3 m_split() network buffer kernel crash

    In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.

    OpenBSD OpenBSD
  • High 7.5
    CVE-2023-52557

    OpenBSD 7.3 invalid l2tp message npppd crash

    In OpenBSD 7.3 before errata 016, npppd(8) could crash by a l2tp message which has an AVP (Attribute-Value Pair) with wrong length.

    OpenBSD OpenBSD