The OpenSSH server and client for secure remote administrative access to the node.
Version: 10.6p1
Type: Service
License:
| Expand | CVE | Title | Status | |
|---|---|---|---|---|
| CVE-2008-3844 Open CVE-2008-3844 in a new tab | Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known. | Not affected | High | |
| CVE-2023-51767 Open CVE-2023-51767 in a new tab | OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses." | Not affected | High | |
| CVE-2007-2768 Open CVE-2007-2768 in a new tab | OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243. | Not affected | Medium | |
| CVE-2007-2243 Open CVE-2007-2243 in a new tab | OpenSSH 4. | Not affected | Low | |
| CVE-2008-3234 Open CVE-2008-3234 in a new tab | sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appen… | Not affected | Low | |
| CVE-2016-20012 Open CVE-2016-20012 in a new tab | OpenSSH through 8. | Not affected | Low | |
| CVE-2018-15919 Open CVE-2018-15919 in a new tab | Remotely observable behaviour in auth-gss2. | Not affected | Low | |
| CVE-2019-6110 Open CVE-2019-6110 in a new tab | In OpenSSH 7. | Not affected | Low | |
| CVE-2020-14145 Open CVE-2020-14145 in a new tab | The client side in OpenSSH 5. | Not affected | Low | |
| CVE-2020-15778 Open CVE-2020-15778 in a new tab | scp in OpenSSH through 8. | Not affected | Low | |
| CVE-2026-106584 Open CVE-2026-106584 in a new tab | In ssh-keygen in OpenSSH before 10. | Not affected | Low | |
| CVE-2026-123158 Open CVE-2026-123158 in a new tab | sshd in OpenSSH before 10. | Not affected | Low | |
| CVE-2026-106552 Open CVE-2026-106552 in a new tab | In sftp in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-106553 Open CVE-2026-106553 in a new tab | In sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-106555 Open CVE-2026-106555 in a new tab | In sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-106582 Open CVE-2026-106582 in a new tab | In sshd and ssh in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-106583 Open CVE-2026-106583 in a new tab | In ssh in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-106585 Open CVE-2026-106585 in a new tab | In sshd and ssh in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-106586 Open CVE-2026-106586 in a new tab | In sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-106587 Open CVE-2026-106587 in a new tab | In sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-55654 Open CVE-2026-55654 in a new tab | Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination | Not affected | Unknown | |
| CVE-2026-59995 Open CVE-2026-59995 in a new tab | sftp in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-59996 Open CVE-2026-59996 in a new tab | scp in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-59997 Open CVE-2026-59997 in a new tab | internal-sftp in sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-59998 Open CVE-2026-59998 in a new tab | sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-59999 Open CVE-2026-59999 in a new tab | In sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-60000 Open CVE-2026-60000 in a new tab | sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-60001 Open CVE-2026-60001 in a new tab | sshd in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-60002 Open CVE-2026-60002 in a new tab | ssh in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-73281 Open CVE-2026-73281 in a new tab | In ssh-agent in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-73282 Open CVE-2026-73282 in a new tab | In ssh in OpenSSH before 10. | Not affected | Unknown | |
| CVE-2026-73283 Open CVE-2026-73283 in a new tab | In sshd in OpenSSH before 10. | Not affected | Unknown |
Certain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008 using a legitimate Red Hat GPG key, contain an externally introduced modification (Trojan Horse) that allows the package authors to have an unknown impact. NOTE: since the malicious packages were not distributed from any official Red Hat sources, the scope of this issue is restricted to users who may have obtained these packages through unofficial distribution points. As of 20080827, no unofficial distributions of this software are known.
OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses."
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence of certain user accounts, which displays a different response if the user account exists and is configured to use one-time passwords (OTP), a similar issue to CVE-2007-2243.
OpenSSH 4.
sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote authenticated users to obtain access to arbitrary SELinux roles by appen…
OpenSSH through 8.
Remotely observable behaviour in auth-gss2.
In OpenSSH 7.
The client side in OpenSSH 5.
scp in OpenSSH through 8.
In ssh-keygen in OpenSSH before 10.
sshd in OpenSSH before 10.
In sftp in OpenSSH before 10.
In sshd in OpenSSH before 10.
In sshd in OpenSSH before 10.
In sshd and ssh in OpenSSH before 10.
In ssh in OpenSSH before 10.
In sshd and ssh in OpenSSH before 10.
In sshd in OpenSSH before 10.
In sshd in OpenSSH before 10.
Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination
sftp in OpenSSH before 10.
scp in OpenSSH before 10.
internal-sftp in sshd in OpenSSH before 10.
sshd in OpenSSH before 10.
In sshd in OpenSSH before 10.
sshd in OpenSSH before 10.
sshd in OpenSSH before 10.
ssh in OpenSSH before 10.
In ssh-agent in OpenSSH before 10.
In ssh in OpenSSH before 10.
In sshd in OpenSSH before 10.
Showing 1–32 of 32