openssh-server

Direct Vulnerabilities

Known vulnerabilities in the openssh-server package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • M
Allocation of Resources Without Limits or Throttling

<0:9.9p1-28.el10_2.rocky.0.1
  • H
Always-Incorrect Control Flow Implementation

<0:9.9p1-27.el10_2.rocky.0.1
  • H
Use After Free

<0:9.9p1-27.el10_2.rocky.0.1
  • H
Incorrect Resource Transfer Between Spheres

<0:9.9p1-27.el10_2.rocky.0.1
  • H
Use of Less Trusted Source

<0:9.9p1-27.el10_2.rocky.0.1
  • H
Directory Traversal

<0:9.9p1-27.el10_2.rocky.0.1
  • H
Use After Free

<0:9.9p1-25.el10_2.rocky.0.1
  • H
Directory Traversal

<0:9.9p1-25.el10_2.rocky.0.1
  • H
Improper Restriction of Communication Channel to Intended Endpoints

<0:9.9p1-25.el10_2.rocky.0.1
  • H
Out-of-bounds Read

<0:9.9p1-25.el10_2.rocky.0.1
  • H
Double Free

<0:9.9p1-25.el10_2.rocky.0.1
  • H
Always-Incorrect Control Flow Implementation

<0:9.9p1-14.el10_1.rocky.0.1
  • H
Unprotected Alternate Channel

<0:9.9p1-14.el10_1.rocky.0.1
  • H
Always-Incorrect Control Flow Implementation

<0:9.9p1-14.el10_1.rocky.0.1
  • H
Incorrect Behavior Order

<0:9.9p1-14.el10_1.rocky.0.1
  • H
Improper Preservation of Permissions

<0:9.9p1-14.el10_1.rocky.0.1
  • M
Improper Neutralization of Null Byte or NUL Character

<0:9.9p1-12.el10_1.rocky.0.1
  • H
CVE-2026-3497

<0:9.9p1-13.el10_1.rocky.0.1
  • M
Failure to Sanitize Special Element

<0:9.9p1-12.el10_1.rocky.0.1
  • M
CVE-2025-32728

<0:9.9p1-11.el10.rocky.0.1