openssh-fips

Direct Vulnerabilities

Known vulnerabilities in the openssh-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H Use After Free	<9.6p1-150600.6.49.1
M Allocation of Resources Without Limits or Throttling	<9.6p1-150600.6.49.1
L Allocation of Resources Without Limits or Throttling	<9.6p1-150600.6.49.1
M Use of Less Trusted Source	<9.6p1-150600.6.49.1
M Improper Following of Specification by Caller	<9.6p1-150600.6.49.1
M Improper Validation of Specified Quantity in Input	<9.6p1-150600.6.49.1
M Directory Traversal	<9.6p1-150600.6.49.1
M Directory Traversal	<9.6p1-150600.6.49.1
M CVE-2026-3497	<9.6p1-150600.6.42.1
H Improper Preservation of Permissions	<9.6p1-150600.6.42.1
M Always-Incorrect Control Flow Implementation	<9.6p1-150600.6.42.1
L Unprotected Alternate Channel	<9.6p1-150600.6.42.1
H Improper Preservation of Permissions	<9.6p1-150600.6.37.1
M Always-Incorrect Control Flow Implementation	<9.6p1-150600.6.37.1
M Improper Neutralization of Null Byte or NUL Character	<9.6p1-150600.6.34.1
M Failure to Sanitize Special Element	<9.6p1-150600.6.34.1
M CVE-2025-32728	<9.6p1-150600.6.26.1
M Allocation of Resources Without Limits or Throttling	<9.6p1-150600.6.15.2
M Detection of Error Condition Without Action	<9.6p1-150600.6.15.2
M CVE-2024-39894	<9.6p1-150600.6.6.1
M OS Command Injection	<9.6p1-150600.6.6.1
H Race Condition	<9.6p1-150600.6.3.1