openssh

Direct Vulnerabilities

Known vulnerabilities in the openssh package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling	<0:9.9p1-28.0.1.el10_2
H Incorrect Resource Transfer Between Spheres	<0:9.9p1-27.0.1.el10_2
H Use After Free	<0:9.9p1-27.0.1.el10_2
H Always-Incorrect Control Flow Implementation	<0:9.9p1-27.0.1.el10_2
H Directory Traversal	<0:9.9p1-27.0.1.el10_2
H Use of Less Trusted Source	<0:9.9p1-27.0.1.el10_2
H Directory Traversal	<0:9.9p1-25.0.1.el10_2
H Improper Restriction of Communication Channel to Intended Endpoints	<0:9.9p1-25.0.1.el10_2
H Out-of-bounds Read	<0:9.9p1-25.0.1.el10_2
H Double Free	<0:9.9p1-25.0.1.el10_2
H Use After Free	<0:9.9p1-25.0.1.el10_2
H Unprotected Alternate Channel	<0:9.9p1-23.0.1.el10_2
H Always-Incorrect Control Flow Implementation	<0:9.9p1-23.0.1.el10_2
H Always-Incorrect Control Flow Implementation	<0:9.9p1-23.0.1.el10_2
H Incorrect Behavior Order	<0:9.9p1-23.0.1.el10_2
H Improper Preservation of Permissions	<0:9.9p1-23.0.1.el10_2
H CVE-2026-3497	<0:9.9p1-13.0.1.el10_1
M Improper Neutralization of Null Byte or NUL Character	<0:9.9p1-12.0.1.el10_1
M Failure to Sanitize Special Element	<0:9.9p1-12.0.1.el10_1
M CVE-2025-32728	<0:9.9p1-11.0.1.el10