ROOT-OS-DEBIAN-13-CVE-2026-60000 CVE-2026-60000 in openssh - Patched by Root

Root has patched CVE-2026-60000 in the openssh package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-59998 CVE-2026-59998 in openssh - Patched by Root

Root has patched CVE-2026-59998 in the openssh package for Root:Debian:13. Multiple fixed versions available...

Astra Linux – Vulnerability in OpenSSH

In OpenSSH 8.2, the scp client incorrectly sends duplicate responses to the server when a utimes system call fails. This allows a malicious, unprivileged user on the remote server to overwrite arbitrary files in the client’s download directory by creating a crafted subdirectory anywhere on the...

Astra Linux – Vulnerability in OpenSSH

In OpenSSH 6.2 through 8.x, prior to version 8.8, when certain non-default configurations were used, privilege escalation could occur because supplementary groups were not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand might run with privileges...

Astra Linux – Vulnerability in OpenSSH

There is a vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The use of sshpktdisconnect on an error condition, which does n...

Astra Linux – Vulnerability in OpenSSH

OpenSSH versions prior to 10.3 mishandle the authorizedkeys principals option in unusual scenarios where a principals list is used in conjunction with a Certificate Authority that utilizes comma characters...

Astra Linux – Vulnerability in OpenSSH

The PKCS11 feature in ssh-agent in OpenSSH prior to version 9.3p2 has an insufficiently trustworthy search path, which can lead to remote code execution if the agent is forwarded to a system controlled by an attacker. The code located in /usr/lib is not necessarily safe for loading into ssh-agent...

ROOT-OS-DEBIAN-11-CVE-2026-59997 CVE-2026-59997 in openssh - Patched by Root

Root has patched CVE-2026-59997 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-60001 CVE-2026-60001 in openssh - Patched by Root

Root has patched CVE-2026-60001 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59995 CVE-2026-59995 in openssh - Patched by Root

Root has patched CVE-2026-59995 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2023-51767 CVE-2023-51767 in openssh - Patched by Root

Root has patched CVE-2023-51767 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59996 CVE-2026-59996 in openssh - Patched by Root

Root has patched CVE-2026-59996 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-60000 CVE-2026-60000 in openssh - Patched by Root

Root has patched CVE-2026-60000 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59999 CVE-2026-59999 in openssh - Patched by Root

Root has patched CVE-2026-59999 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-60002 CVE-2026-60002 in openssh - Patched by Root

Root has patched CVE-2026-60002 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ROOT-OS-DEBIAN-11-CVE-2026-59998 CVE-2026-59998 in openssh - Patched by Root

Root has patched CVE-2026-59998 in the openssh package for Root:Debian:11. Multiple fixed versions available...

ANT-2026-T6EKK5DB · openssh · heap-buffer-overflow (READ of size 1, 1 byte before allocation)

heap-buffer-overflow low Severity Claude critical · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-T6EKK5DB: heap-buffer-overflow READ of size 1, 1 byte...

ANT-2026-2NNMB24E · openssh · stack-overflow

stack-overflow low Severity Claude critical · Security research firm low · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Calif. ANT-2026-2NNMB24E: stack-overflow in openssh OpenSSH's matchpattern in...

CVE-2026-73282

A flaw was found in OpenSSH. A use-after-free vulnerability exists in the ssh client when handling concurrent remote-forwarding operations. This can occur if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. A...

CVE-2026-73283

A flaw was found in OpenSSH's sshd component. The restrict keyword, designed to limit tunnel forwarding within the authorizedkeys file, was not correctly enforced for tunnel forwarding. This issue could allow a local attacker to bypass intended security restrictions, potentially leading to...