Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2026-60002

Опубликовано: 08 июл. 2026
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 7.7

Описание

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

РелизСтатусПримечание
devel

needed

esm-infra-legacy/trusty

needs-triage

esm-infra-legacy/xenial

needs-triage

esm-infra/bionic

needs-triage

esm-infra/focal

needs-triage

fips-preview/jammy

needed

fips-updates/bionic

needs-triage

fips-updates/focal

needs-triage

fips-updates/jammy

released

1:8.9p1-3ubuntu0.16+Fips3
fips-updates/noble

released

1:9.6p1-3ubuntu13.18+Fips1

Показывать по

РелизСтатусПримечание
devel

ignored

esm-apps/bionic

ignored

esm-apps/focal

ignored

esm-apps/jammy

ignored

esm-apps/noble

ignored

esm-apps/resolute

ignored

jammy

ignored

noble

ignored

questing

ignored

resolute

ignored

Показывать по

EPSS

Процентиль: 22%
0.003
Низкий

7.7 High

CVSS3

Связанные уязвимости

CVSS3: 7.7
redhat
25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVSS3: 7.7
nvd
25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVSS3: 7.7
msrc
24 дня назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

CVSS3: 7.7
debian
25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server cha ...

CVSS3: 7.7
github
25 дней назад

ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)

EPSS

Процентиль: 22%
0.003
Низкий

7.7 High

CVSS3