7611 matches found
ANT-2026-T6EKK5DB · openssh · heap-buffer-overflow (READ of size 1, 1 byte before allocation)
heap-buffer-overflow low Severity Claude critical · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-T6EKK5DB: heap-buffer-overflow READ of size 1, 1 byte...
ANT-2026-2NNMB24E · openssh · stack-overflow
stack-overflow low Severity Claude critical · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-2NNMB24E: stack-overflow in openssh OpenSSH's matchpattern in...
CVE-2026-73282
A flaw was found in OpenSSH. A use-after-free vulnerability exists in the ssh client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A...
CVE-2026-73283
A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...
SUSE CVE-2026-73281
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...
SUSE CVE-2026-73282
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent...
SUSE CVE-2026-73283
In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not...
JLSEC-2026-1323 In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...
In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not...
JLSEC-2026-1324 sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource...
sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service resource consumption from excessive authentication attempts because MaxAuthTries was mishandled for GSSAPIAuthentication...
JLSEC-2026-1326 ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a...
ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. This outcome occurs only on the client side...
JLSEC-2026-1319 sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...
sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server...
JLSEC-2026-1325 sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.
sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay...
JLSEC-2026-1329 In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...
In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not...
JLSEC-2026-1321 internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,...
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...
JLSEC-2026-1322 sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...
sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...
JLSEC-2026-1327 In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the [email protected] extension...
JLSEC-2026-1320 scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when...
scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations...
JLSEC-2026-1328 In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of...
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent...
