SSH-Weak-DH

About This tool creates SSH connections to a server and goes through different client configurations to check if the server permits a Diffie-Hellman DH key exchange using a weak group. We aim for our tool to help assess SSH servers for weak DH key exchange settings. Please be aware that this tool...

CLEANSTART-2024-CZ43082 Issue summary: Checking excessively long DH keys or parameters may be very slow

Security vulnerability affects the openssl1.1-compat package. Issue summary: Checking excessively long DH keys or parameters may be very slow...

blackfire-conprof (>=1.2.6, <=1.2.11), dh-potluck (>=1.37.3, <=2.13.0) +2 more potentially affected by CVE-2026-116588 via ddtrace (>=4.0.0, <=4.14.0)

ddtrace PYPI version =4.0.0, =1.2.6, =1.37.3, =0.86.4rc0, =8.0.0, =8.1.0 Source cves: CVE-2026-116588 Source advisory: OSV:GHSA-3633-R77Q-H3V3...

blackfire-conprof (>=1.2.6, <=1.2.11), dh-potluck (>=1.37.3, <=2.13.0) +2 more potentially affected by CVE-2026-116588 via ddtrace (>=4.0.0, <=4.14.0)

ddtrace PYPI version =4.0.0, =1.2.6, =1.37.3, =0.86.4rc0, =8.0.0, =8.1.0 Source cves: CVE-2026-116588 Source advisory: GHSA-3633-R77Q-H3V3...

blackfire-conprof (>=1.2.6, <=1.2.11), dh-potluck (>=1.37.3, <=2.13.0) +2 more potentially affected by CVE-2026-116588 via ddtrace (>=4.0.0, <=4.14.0)

ddtrace PYPI version =4.0.0, =1.2.6, =1.37.3, =0.86.4rc0, =8.0.0, =8.1.0 Source cves: CVE-2026-116588 Source advisory: SNYK:PYTHON-DDTRACE-21756852...

blackfire-conprof (>=1.2.6, <=1.2.11), dh-potluck (>=1.37.3, <=2.13.0) +2 more potentially affected by CVE-2026-116588 via ddtrace (>=4.0.0, <=4.14.0)

ddtrace PYPI version =4.0.0, =1.2.6, =1.37.3, =0.86.4rc0, =8.0.0, =8.1.0 Source cves: CVE-2026-116588 Source advisory: MEND:CVE-2026-116588...

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

Astra Linux – Vulnerability in StrongSwan

StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

Rocky Linux 8 [CIQ] Security Update: openssl / openssl-debuginfo / openssl-debugsource / openssl-devel / etc Multiple Vulnerabilities (crlsa-2023_7877)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20237877 advisory. openssl: Excessive time spent checking DH keys and parameters CVE-2023-3446 OpenSSL: Excessive time spent checking DH q parameter value CVE-2023-3817...

Rocky Linux 8 [CIQ] Security Update: openssh / openssh-askpass / openssh-askpass-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_47755)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202647755 advisory. openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Rocky Linux OpenSSH client versions CVE-2026-55655 openssh: Double free in...

AlmaLinux 9.2 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.2:CLSA-2026:1783694178)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783694178 advisory. - A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX...

Rocky Linux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.6:CLSA-2026:1783706054)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783706054 advisory. - A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX...

AlmaLinux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc (ALMALINUX9.6:CLSA-2026:1783706054)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783706054 advisory. - A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: shim (UTSA-2026-091452)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-091452 advisory. During key agreement in a TLS handshake using a DHE based ciphersuite a malicious server can send a very large prime value to the client. This will cause the client ...

SUSE CVE-2026-90230

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmetauthnegotiate nvmetexecuteauthsend allocates the DH-HMAC-CHAP message buffer with the host-supplied transfer length tl and hands it to nvmetauthnegotiate without passing tl along...

AZL-102626 CVE-2026-90230 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmetauthnegotiate nvmetexecuteauthsend allocates the DH-HMAC-CHAP message buffer with the host-supplied transfer length tl and hands it to nvmetauthnegotiate without passing tl along...

CVE-2026-90230 nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()

In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmetauthnegotiate nvmetexecuteauthsend allocates the DH-HMAC-CHAP message buffer with the host-supplied transfer length tl and hands it to nvmetauthnegotiate without passing tl along...