openssh

Direct Vulnerabilities

Known vulnerabilities in the openssh package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Directory Traversal	<0:8.0p1-33.0.1.el8_10
H Use After Free	<0:8.0p1-33.0.1.el8_10
H Use of Less Trusted Source	<0:8.0p1-33.0.1.el8_10
M Double Free	<0:8.0p1-30.0.1.el8_10
M Improper Restriction of Communication Channel to Intended Endpoints	<0:8.0p1-30.0.1.el8_10
H Improper Preservation of Permissions	<0:8.0p1-29.0.1.el8_10
H Always-Incorrect Control Flow Implementation	<0:8.0p1-29.0.1.el8_10
H Always-Incorrect Control Flow Implementation	<0:8.0p1-29.0.1.el8_10
H Unprotected Alternate Channel	<0:8.0p1-29.0.1.el8_10
H Incorrect Behavior Order	<0:8.0p1-29.0.1.el8_10
H CVE-2026-3497	<0:8.0p1-28.0.1.el8_10
M Improper Neutralization of Null Byte or NUL Character	<0:8.0p1-27.0.1.el8_10
M Failure to Sanitize Special Element	<0:8.0p1-27.0.1.el8_10
M Detection of Error Condition Without Action	<0:8.0p1-26.0.1.el8_10
M OS Command Injection	<0:8.0p1-24.0.1.el8
M Improper Validation of Integrity Check Value	<0:8.0p1-19.0.1.el8_9.2
M OS Command Injection	<0:8.0p1-19.0.1.el8_9.2
H Unquoted Search Path or Element	<0:8.0p1-19.el8_8
M CVE-2021-41617	<0:8.0p1-13.el8
M Information Exposure	<0:8.0p1-10.el8
M Directory Traversal	<0:8.0p1-3.el8
M Incorrect Authorization	<0:8.0p1-3.el8
M Improper Encoding or Escaping of Output	<0:8.0p1-3.el8