openssh

Direct Vulnerabilities

Known vulnerabilities in the openssh package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Always-Incorrect Control Flow Implementation	<10.3_p1-r1
L Use After Free	<10.3_p1-r1
L Directory Traversal	<10.3_p1-r1
L Use After Free	<10.3_p1-r1
L Use of Less Trusted Source	<10.3_p1-r1
L Incorrect Resource Transfer Between Spheres	<10.3_p1-r1
L Allocation of Resources Without Limits or Throttling	<10.3_p1-r1
L Allocation of Resources Without Limits or Throttling	<10.3_p1-r1
L Improper Validation of Specified Quantity in Input	<10.3_p1-r1
L Directory Traversal	<10.3_p1-r1
L Improper Following of Specification by Caller	<10.3_p1-r1
M Directory Traversal	<7.9_p1-r3
H Untrusted Search Path	<7.4_p1-r0
M Key Management Errors	<7.4_p1-r0
M Allocation of Resources Without Limits or Throttling	<9.9_p2-r0
H Double Free	<8.5_p1-r0
M Information Exposure	<8.4_p1-r0
M Incorrect Authorization	<7.9_p1-r3
H OS Command Injection	<8.3_p1-r0
M Improper Encoding or Escaping of Output	<7.9_p1-r3
H Out-of-Bounds	<7.4_p1-r0
M Race Condition	<7.7_p1-r4
L Improper Authentication	<8.9_p1-r0
H Access Restriction Bypass	<7.4_p1-r0
L CVE-2025-32728	<10.0_p1-r0
H Race Condition	<9.8_p1-r0
M Incorrect Permission Assignment for Critical Resource	<7.5_p1-r8
H Improper Privilege Management	<8.8_p1-r0
M Detection of Error Condition Without Action	<9.9_p2-r0
H CVE-2023-51767	<9.7_p1-r0
M OS Command Injection	<9.6_p1-r0
M CVE-2023-51384	<9.6_p1-r0
L Failure to Sanitize Special Element	<10.1_p1-r0
M Improper Validation of Integrity Check Value	<9.6_p1-r0
L Improper Neutralization of Null Byte or NUL Character	<10.1_p1-r0