openssh

Direct Vulnerabilities

Known vulnerabilities in the openssh package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Use After Free	<1:8.2p1-4ubuntu0.13+esm3
M Allocation of Resources Without Limits or Throttling	<1:8.2p1-4ubuntu0.13+esm3
M Allocation of Resources Without Limits or Throttling	<1:8.2p1-4ubuntu0.13+esm3
M Use of Less Trusted Source	<1:8.2p1-4ubuntu0.13+esm3
M Improper Following of Specification by Caller	<1:8.2p1-4ubuntu0.13+esm3
M Improper Validation of Specified Quantity in Input	<1:8.2p1-4ubuntu0.13+esm3
M Directory Traversal	<1:8.2p1-4ubuntu0.13+esm3
M Always-Incorrect Control Flow Implementation	<1:8.2p1-4ubuntu0.13+esm3
M Always-Incorrect Control Flow Implementation	<1:8.2p1-4ubuntu0.13+esm3
M Improper Preservation of Permissions	<1:8.2p1-4ubuntu0.13+esm2
L Out-of-bounds Read	*
M CVE-2026-3497	<1:8.2p1-4ubuntu0.13+esm1
L Improper Neutralization of Null Byte or NUL Character	<1:8.2p1-4ubuntu0.13+esm1
L Failure to Sanitize Special Element	<1:8.2p1-4ubuntu0.13+esm1
M CVE-2025-32728	<1:8.2p1-4ubuntu0.13
M Detection of Error Condition Without Action	<1:8.2p1-4ubuntu0.12
M OS Command Injection	<1:8.2p1-4ubuntu0.11
M Improper Validation of Integrity Check Value	<1:8.2p1-4ubuntu0.10
M Unquoted Search Path or Element	<1:8.2p1-4ubuntu0.8
L Improper Privilege Management	<1:8.2p1-4ubuntu0.11
M Double Free	<1:8.2p1-4ubuntu0.2
M Improper Encoding or Escaping of Output	<1:7.9p1-6
M Incorrect Authorization	<1:7.9p1-5
L Incorrect Permission Assignment for Critical Resource	<1:7.6p1-4