Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 8

Количество 8

github логотип

GHSA-5mx2-7g4j-9m39

около 1 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
EPSS: Низкий
ubuntu логотип

CVE-2026-55654

около 1 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
EPSS: Низкий
redhat логотип

CVE-2026-55654

около 1 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2026-55654

около 1 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2026-55654

около 1 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds ...

CVSS3: 3.7
EPSS: Низкий
rocky логотип

RLSA-2026:47757

4 дня назад

Important: openssh security update

EPSS: Низкий
rocky логотип

RLSA-2026:47756

3 дня назад

Important: openssh security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-47757

4 дня назад

ELSA-2026-47757: openssh security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-5mx2-7g4j-9m39

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
0%
Низкий
около 1 месяца назад
ubuntu логотип
CVE-2026-55654

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
0%
Низкий
около 1 месяца назад
redhat логотип
CVE-2026-55654

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
0%
Низкий
около 1 месяца назад
nvd логотип
CVE-2026-55654

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
0%
Низкий
около 1 месяца назад
debian логотип
CVE-2026-55654

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds ...

CVSS3: 3.7
0%
Низкий
около 1 месяца назад
rocky логотип
RLSA-2026:47757

Important: openssh security update

4 дня назад
rocky логотип
RLSA-2026:47756

Important: openssh security update

3 дня назад
oracle-oval логотип
ELSA-2026-47757

ELSA-2026-47757: openssh security update (IMPORTANT)

4 дня назад

Уязвимостей на страницу