CVE-2026-35388

Опубликовано: 02 апр. 2026

Источник: nvd

CVSS3: 2.5

EPSS Низкий

Описание

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

Ссылки

https://marc.info/?l=openssh-unix-dev&m=177513443901484&w=2
Third Party Advisory
https://www.openssh.org/releasenotes.html#10.3p1
Release Notes
https://www.openwall.com/lists/oss-security/2026/04/02/3
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*

Версия до 10.3 (исключая)

EPSS

Процентиль: 3%

0.00132

Низкий

2.5 Low

CVSS3

Дефекты

CWE-420

Связанные уязвимости

CVE-2026-35388

CVSS3: 2.5

ubuntu

7 месяцев назад

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

CVE-2026-35388

CVSS3: 2.2

redhat

7 месяцев назад

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

CVE-2026-35388

CVSS3: 2.5

msrc

7 месяцев назад

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

CVE-2026-35388

CVSS3: 2.5

debian

7 месяцев назад

OpenSSH before 10.3 omits connection multiplexing confirmation for pro ...

GHSA-9fjj-jvxf-738c

CVSS3: 2.5

github

7 месяцев назад

OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.

EPSS

Процентиль: 3%

0.00132

Низкий

2.5 Low

CVSS3

Дефекты

CWE-420