openssh | Snyk

Direct Vulnerabilities

Known vulnerabilities in the openssh package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Information Exposure	*
L Improper Neutralization of Special Elements	*
M Arbitrary Command Injection	*
L User Interface (UI) Misrepresentation of Critical Information	*
L Information Exposure	*
L Improper Input Validation	*
L Information Exposure	*
L Information Exposure	*
L Improper Authentication	*
L Improper Authentication	*
L Missing Critical Step in Authentication	*
L Missing Critical Step in Authentication	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M User Interface (UI) Misrepresentation of Critical Information	*
M Improper Input Validation	*
M Improper Input Validation	*
M Information Exposure	*
M Allocation of Resources Without Limits or Throttling	*
M Covert Timing Channel	*
M Untrusted Search Path	*
M Untrusted Search Path	*
M Improper Input Validation	*
M Improper Access Control	*
M Access Restriction Bypass	*
M Use After Free	*
M Use After Free	*
M Incorrect Privilege Assignment	*
M Incorrect Privilege Assignment	*
M Incorrect Authorization	*
M Improper Authentication	*
M Improper Restriction of Excessive Authentication Attempts	<0:9.9p1-29.el10_2
M Missing Initialization of Resource	<0:9.9p1-29.el10_2
M Arbitrary Argument Injection	<0:9.9p1-29.el10_2
L Incomplete Cleanup	*
L Incomplete Cleanup	<0:10.5p1-1.3.hum1
M Improper Handling of Highly Compressed Data (Data Amplification)	*
M Improper Handling of Highly Compressed Data (Data Amplification)	<0:10.5p1-1.2.hum1
L OS Command Injection	*
L OS Command Injection	<0:10.5p1-1.2.hum1
L Misinterpretation of Input	<0:10.5p1-1.2.hum1
L Information Exposure	*
L Information Exposure	<0:10.5p1-1.2.hum1
L Improper Certificate Validation	<0:10.5p1-1.2.hum1
M Directory Traversal	*
M Directory Traversal	<0:10.5p1-1.2.hum1
M Allocation of Resources Without Limits or Throttling	<0:10.5p1-1.2.hum1
M OS Command Injection	<0:10.5p1-1.2.hum1
M Information Exposure	<0:10.5p1-1.2.hum1
M Directory Traversal	<0:10.5p1-1.2.hum1
L Exposure of Data Element to Wrong Session	<0:10.5p1-1.3.hum1
L Exposure of Data Element to Wrong Session	*
M Allocation of Resources Without Limits or Throttling	<0:9.9p1-7.el10_0
L Privilege Defined With Unsafe Actions	<0:10.5p1-1.2.hum1
H Improperly Implemented Security Check for Standard	<0:9.9p1-7.el10_0.5
M Expired Pointer Dereference	<0:9.9p1-7.el10_0.5
M Improper Restriction of Excessive Authentication Attempts	<0:9.9p1-7.el10_0.5
M Directory Traversal	<0:9.9p1-7.el10_0.5
M Directory Traversal	<0:9.9p1-7.el10_0.5
M Improper Restriction of Communication Channel to Intended Endpoints	<0:9.9p1-7.el10_0.5
M Double Free	<0:9.9p1-7.el10_0.5
M Improper Restriction of Excessive Authentication Attempts	<0:9.9p1-28.el10_2
L Incorrect Privilege Assignment	<0:9.9p1-27.el10_2
M Directory Traversal	<0:9.9p1-27.el10_2
M Authentication Bypass by Primary Weakness	<0:9.9p1-27.el10_2
M Expired Pointer Dereference	<0:9.9p1-27.el10_2
H Improperly Implemented Security Check for Standard	<0:9.9p1-27.el10_2
H Expired Pointer Dereference	<0:9.9p1-7.el10_0.4
M Expired Pointer Dereference	<0:10.5p1-1.hum1
M Authentication Bypass by Primary Weakness	<0:10.5p1-1.hum1
L Incorrect Privilege Assignment	<0:10.5p1-1.hum1
L Out-of-bounds Read	<0:9.9p1-25.el10_2
M Directory Traversal	<0:9.9p1-25.el10_2
M Double Free	<0:9.9p1-25.el10_2
M Improper Restriction of Communication Channel to Intended Endpoints	<0:9.9p1-25.el10_2
H Expired Pointer Dereference	<0:9.9p1-25.el10_2
M Directory Traversal	<0:10.4p1-1.hum1
M Arbitrary Argument Injection	<0:10.4p1-1.hum1
M Improper Restriction of Excessive Authentication Attempts	<0:10.4p1-1.hum1
M Improperly Implemented Security Check for Standard	<0:10.4p1-1.hum1
H Expired Pointer Dereference	<0:10.4p1-1.hum1
H Directory Traversal	<0:10.4p1-1.hum1
M Missing Initialization of Resource	<0:10.4p1-1.hum1
M Improper Restriction of Excessive Authentication Attempts	<0:10.4p1-1.hum1
M Improper Restriction of Communication Channel to Intended Endpoints	<0:10.3p1-6.hum1
M Double Free	<0:10.3p1-6.hum1
L Out-of-bounds Read	<0:10.3p1-6.hum1
L Misinterpretation of Input	<0:9.9p1-23.el10_2
M Improper Handling of Inconsistent Special Elements	<0:9.9p1-23.el10_2
L Missing Authentication for Critical Function	<0:9.9p1-23.el10_2
L OS Command Injection	<0:9.9p1-23.el10_2
H Improper Preservation of Permissions	<0:9.9p1-23.el10_2
L Misinterpretation of Input	<0:9.9p1-14.el10_1
L Missing Authentication for Critical Function	<0:9.9p1-14.el10_1
L OS Command Injection	<0:9.9p1-14.el10_1
M Improper Handling of Inconsistent Special Elements	<0:9.9p1-14.el10_1
H Improper Preservation of Permissions	<0:9.9p1-14.el10_1
L OS Command Injection	<0:9.9p1-7.el10_0.3
L Missing Authentication for Critical Function	<0:9.9p1-7.el10_0.3
H Improper Preservation of Permissions	<0:9.9p1-7.el10_0.3
L Misinterpretation of Input	<0:9.9p1-7.el10_0.3
M Improper Handling of Inconsistent Special Elements	<0:9.9p1-7.el10_0.3
M Improper Neutralization of Null Byte or NUL Character	<0:10.2p1-9.hum1
M Failure to Sanitize Special Element	<0:10.2p1-9.hum1
H Access of Uninitialized Pointer	<0:10.2p1-9.hum1
H Access of Uninitialized Pointer	<0:9.9p1-7.el10_0.2
H Access of Uninitialized Pointer	<0:9.9p1-13.el10_1
M Improper Neutralization of Null Byte or NUL Character	<0:9.9p1-7.el10_0.1
M Failure to Sanitize Special Element	<0:9.9p1-7.el10_0.1
M Improper Neutralization of Null Byte or NUL Character	<0:9.9p1-12.el10_1
M Failure to Sanitize Special Element	<0:9.9p1-12.el10_1
M Expected Behavior Violation	<0:9.9p1-11.el10

Vulnerability

Vulnerable Version

Information Exposure