1063 matches found
CLSA-2026-1792935277 openssh: Fix of 4 CVEs
CVE-2026-106585: a compressed packet could inflate far beyond the maximum packet size and exhaust memory; reject it once the decompressed payload reaches PACKETMAXSIZE. Backport upstream commit e0f85d83. - CVE-2026-106555: sshd kept GSSAPI client state from a partially completed authentication...
CLSA-2026-1792933338 openssh: Fix of 4 CVEs
CVE-2026-106555: sshd kept GSSAPI client state from a partially completed authentication attempt and could reuse it in a later attempt; reset it before each attempt. Backport upstream commits 670510d1 and d549f99d. - CVE-2026-106553: sshd stored delegated GSSAPI credentials even when GSSAPI user...
pivotnacci
pivotnacci Pivot into the internal network by deploying HTTP agents. Pivotnacci allows you to create a socks server which communicates with HTTP agents. The architecture looks like the following: This tool was inspired by the great reGeorg. However, it includes some improvements: Support for...
gssapi-abuse
gssapi-abuse gssapi-abuse was released as part of my DEF CON 31 talk. A full write up on the abuse vector can be found here: A Broken Marriage: Abusing Mixed Vendor Kerberos Stacks The tool has two features. The first is the ability to enumerate non Windows hosts that are joined to Active Directo...
CVE-2026-31635-DirtyDecrypt
CVE-2026-31635 · DirtyDecrypt Linux local privilege escalation in the RxRPC/GSSAPI decryption path. A missing skbcowdata check in rxgkdecryptskb allows an unprivileged local attacker to corrupt page cache pages and overwrite in-memory contents of read-only files. Contents Overview Quick Start...
MiracleLinux 8 : openssh-8.0p1-34.el8_10 (AXSA:2026-2142:15)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2142:15 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented...
RLSA-2026:88211 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...
MiracleLinux 9 : openssh-9.9p1-13.el9_8.ML.1 (AXSA:2026-2122:14)
The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2122:14 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented...
Oracle Linux 8 : openssh (ELSA-2026-88211)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-88211 advisory. - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsin...
RockyLinux 8 : openssh (RLSA-2026:88211)
The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:88211 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck...
RLSA-2026:85958 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...
openssh security update
An update is available for openssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
openssh security update
8.0p1-34.0.1 - Update upstream references Orabug: 36587718 8.0p1-34 - CVE-2026-59998: Document caveat regarding GSSAPIStrictAcceptorCheck Resolves: RHEL-272840 - CVE-2026-59997: Fix internal-sftp server argument parsing limit Resolves: RHEL-272843 - CVE-2026-60000: Fix DoS via excessive GSSAPI...
RHEL 8 : openssh (RHSA-2026:88211)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:88211 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files...
SUSE CVE-2026-101296
A missing critical step in authentication vulnerability in Apache Tomcat when the JNDI realm was configured with with a non GSSAPI SASL authentication mechanism allowed attackers to authenticate without providing the correct password. This issue affects Apache Tomcat: from 11.0.0-M1 through...
RLSA-2026:85847 Moderate: openssh security update
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-599...
openssh security update
An update is available for openssh. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux,...
CLEANSTART-2026-EH67735 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Security vulnerability affects the coredns-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...
openssh security update
9.9p1-13.0.1 - Restore pamsshagentrel values that were used for initial release - Fix PerSourcePenalties grace-exceeded using the crash penalty value Orabug: 39825354 - Replace unsupported ML-KEM hybrid algorithm skip logic with v9.9p1-23.el102 ML-KEM/NIST backport Orabug: 39423076 - Upstream...
AlmaLinux 10 : openssh (ALSA-2026:85847)
The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:85847 advisory. openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw CVE-2026-59997 openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck...