CVE-2025-61984

🗓️ 06 Oct 2025 00:00:00Reported by Alpine Linux Development TeamType

CVE-2025-61984: OpenSSH before 10.1 allows control chars in usernames from untrusted sources, enabling ProxyCommand code execution.

Reporter	Title	Published	Views	Family All 211
IBM Security Bulletins	Security Bulletin: IBM i is Affected by Improper Handling of Special Elements and Improper Neutralization of Null Byte Vulnerabilities in OpenSSH [CVE-2025-61984, CVE-2025-61985]	18 May 202620:52	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in openssh library (CVE-2025-61984, CVE-2025-61985) affect Power HMC.	31 Mar 202615:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)	21 Aug 202601:32	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenSSH affects IBM Netezza Appliance	15 Apr 202610:29	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS is vulnerable to potential code execution (CVE-2025-61984, CVE-2025-61985) due to OpenSSH	6 Jan 202621:08	–	ibm
GithubExploit	Exploit for CVE-2025-61984	13 Oct 202501:42	–	githubexploit
GithubExploit	Exploit for CVE-2025-61984	7 Oct 202503:17	–	githubexploit
Tenable Nessus	Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2026-1441)	19 Feb 202600:00	–	nessus
Tenable Nessus	Amazon Linux 2 : openssh, --advisory ALAS2-2026-3175 (ALAS-2026-3175)	19 Feb 202600:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0198: openssh (ALINUX3-SA-2025:0198)	29 Dec 202500:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
Alpine Linux	3.19	any	openssh	7.9_p1-r3	openssh-7.9_p1-r3.apk
Alpine Linux	3.20	any	openssh	7.9_p1-r3	openssh-7.9_p1-r3.apk
Alpine Linux	3.21	any	openssh	7.9_p1-r3	openssh-7.9_p1-r3.apk
Alpine Linux	3.22	any	openssh	7.9_p1-r3	openssh-7.9_p1-r3.apk
Alpine Linux	3.19	any	openssh	8.8_p1-r0	openssh-8.8_p1-r0.apk
Alpine Linux	3.20	any	openssh	8.8_p1-r0	openssh-8.8_p1-r0.apk
Alpine Linux	3.21	any	openssh	8.8_p1-r0	openssh-8.8_p1-r0.apk
Alpine Linux	3.22	any	openssh	8.8_p1-r0	openssh-8.8_p1-r0.apk
Alpine Linux	3.20	any	openssh	9.7_p1-r5	openssh-9.7_p1-r5.apk
Alpine Linux	3.19	any	openssh	9.7_p2-r5	openssh-9.7_p2-r5.apk

Source	Link
marc	www.marc.info/
openssh	www.openssh.com/releasenotes.html
openwall	www.openwall.com/lists/oss-security/2025/10/06/1
dgl	www.dgl.cx/2025/10/bash-a-newline-ssh-proxycommand-cve-2025-61984
openwall	www.openwall.com/lists/oss-security/2025/10/07/1
openwall	www.openwall.com/lists/oss-security/2025/10/12/1
vicarius	www.vicarius.io/vsociety/posts/cve-2025-61984-detection-script-remote-code-execution-vulnerability-affecting-openssh
vicarius	www.vicarius.io/vsociety/posts/cve-2025-61984-mitigation-script-remote-code-execution-vulnerability-affecting-openssh
cert-portal	www.cert-portal.siemens.com/productcert/html/ssa-019113.html

14 Jul 2026 13:17Current

7.8High risk

Vulners AI Score7.8

CVSS 3.13.6

EPSS0.00275

SSVC