주요 제품 취약점 (30건)
"OpenSSH" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
OpenSSH
GNU Bourne-Again Shell (Bash)
GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which…
|
CVE-2014-7169 | 9.8 | CWE-78 | KEV | 2022-01-28 |
|
OpenSSH
GNU Bourne-Again Shell (Bash)
GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to e…
|
CVE-2014-6271 | 9.8 | CWE-78 | KEV | 2022-01-28 |
|
OpenSSH
GNU GNU Bash
GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, which allows remote attackers to…
|
CVE-2014-6278 | 8.8 | CWE-78 | KEV | 2025-10-02 |
|
OpenSSH
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-97816 | 9.8 | CWE-416 | — | |
|
OpenSSH
ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is…
|
CVE-2023-28531 | 9.8 | CWE-284 | — | |
|
OpenSSH
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-88157 | 8.8 | CWE-122 | — | |
|
OpenSSH
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83923 | 8.8 | CWE-23 | — | |
|
OpenSSH
Double free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-97811 | 7.8 | CWE-400 | — | |
|
OpenSSH
Use after free in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83769 | 7.8 | CWE-416 | — | |
|
OpenSSH
Heap-based buffer overflow in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-83754 | 7.5 | CWE-122 | — | |
|
OpenSSH
Allocation of resources without limits or throttling in OpenSSH for Windows allows an unauthorized attacker to deny service over a network.
|
CVE-2026-70163 | 7.5 | CWE-770 | — | |
|
OpenSSH
Use after free in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
|
CVE-2026-69397 | 7.5 | CWE-416 | — | |
|
OpenSSH
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Lin…
|
CVE-2026-3497 | 7.5 | CWE-908 | — | |
|
OpenSSH
Heap-based buffer overflow in OpenSSH for Windows allows an authorized attacker to elevate privileges locally.
|
CVE-2026-83871 | 7.0 | CWE-122 | — | |
|
OpenSSH
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups…
|
CVE-2021-41617 | 7.0 | CWE-269 | — | |
|
OpenSSH
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed…
|
CVE-2026-106585 | 6.5 | CWE-409 | — | |
|
OpenSSH
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a …
|
CVE-2025-26466 | 5.9 | CWE-770 | — | |
|
OpenSSH
In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destination constraints are specified during ad…
|
CVE-2023-51384 | 5.5 | CWE-284 | — | |
|
OpenSSH
In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive cop…
|
CVE-2026-106552 | 4.2 | CWE-23 | — | |
|
OpenSSH
In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing th…
|
CVE-2026-106582 | 3.7 | CWE-514 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a fe…
|
CVE-2026-106587 | 3.6 | CWE-843 | — | |
|
OpenSSH
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
|
CVE-2025-61985 | 3.6 | CWE-158 | — | |
|
OpenSSH
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code…
|
CVE-2025-61984 | 3.6 | CWE-159 | — | |
|
OpenSSH
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This…
|
CVE-2026-106589 | 2.9 | CWE-272 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.
|
CVE-2026-73283 | 2.5 | CWE-670 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different…
|
CVE-2026-106586 | 2.5 | CWE-670 | — | |
|
OpenSSH
In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a sligh…
|
CVE-2026-106584 | 2.5 | CWE-193 | — | |
|
OpenSSH
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
|
CVE-2026-106583 | 2.5 | CWE-99 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts.
|
CVE-2026-106555 | 2.2 | CWE-669 | — | |
|
OpenSSH
In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt.
|
CVE-2026-106553 | 2.2 | CWE-669 | — |