openssh

Direct Vulnerabilities

Known vulnerabilities in the openssh package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling	<0:9.9p1-12.0.1.el9_8
H Use After Free	<0:9.9p1-11.0.1.el9_8
H Incorrect Resource Transfer Between Spheres	<0:9.9p1-11.0.1.el9_8
H Use of Less Trusted Source	<0:9.9p1-11.0.1.el9_8
H Directory Traversal	<0:9.9p1-11.0.1.el9_8
H Always-Incorrect Control Flow Implementation	<0:9.9p1-11.0.1.el9_8
H Double Free	<0:9.9p1-9.0.1.el9_8
H Use After Free	<0:9.9p1-9.0.1.el9_8
H Directory Traversal	<0:9.9p1-9.0.1.el9_8
H Out-of-bounds Read	<0:9.9p1-9.0.1.el9_8
H Improper Restriction of Communication Channel to Intended Endpoints	<0:9.9p1-9.0.1.el9_8
H Always-Incorrect Control Flow Implementation	<0:9.9p1-7.0.2.el9_8
H Improper Preservation of Permissions	<0:9.9p1-7.0.2.el9_8
H Always-Incorrect Control Flow Implementation	<0:9.9p1-7.0.2.el9_8
H Unprotected Alternate Channel	<0:9.9p1-7.0.2.el9_8
H Incorrect Behavior Order	<0:9.9p1-7.0.2.el9_8
H CVE-2026-3497	<0:8.7p1-48.0.1.el9_7
M Improper Neutralization of Null Byte or NUL Character	<0:8.7p1-47.0.1.el9_7
M Failure to Sanitize Special Element	<0:8.7p1-47.0.1.el9_7
M Detection of Error Condition Without Action	<0:8.7p1-45.0.2.el9
M Race Condition	<0:8.7p1-38.0.2.el9_4.4
H Race Condition	<0:8.7p1-38.0.2.el9
M OS Command Injection	<0:8.7p1-34.el9_3.3
M Improper Validation of Integrity Check Value	<0:8.7p1-34.el9_3.3
H Unquoted Search Path or Element	<0:8.7p1-30.el9_2
M Double Free	<0:8.7p1-29.el9_2