Количество 16
Количество 16
CVE-2026-3497
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.
CVE-2026-3497
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.
CVE-2026-3497
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.
CVE-2026-3497
Vulnerability in the OpenSSH GSSAPI delta included in various Linux di ...
RLSA-2026:6463
Important: openssh security update
RLSA-2026:6462
Important: openssh security update
RLSA-2026:6461
Important: openssh security update
GHSA-wcpp-3x59-h8vp
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration.
ELSA-2026-6463
ELSA-2026-6463: openssh security update (IMPORTANT)
ELSA-2026-6462
ELSA-2026-6462: openssh security update (IMPORTANT)
ELSA-2026-6461
ELSA-2026-6461: openssh security update (IMPORTANT)
openSUSE-SU-2026:21044-1
Security update for openssh
SUSE-SU-2026:2395-1
Security update for openssh
SUSE-SU-2026:2430-1
Security update for openssh8.4
SUSE-SU-2026:2375-1
Security update for openssh
SUSE-SU-2026:2371-1
Security update for openssh
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-3497 Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration. | CVSS3: 7.5 | 2% Низкий | 5 месяцев назад |
 | CVE-2026-3497 Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration. | CVSS3: 8.2 | 2% Низкий | 5 месяцев назад |
 | CVE-2026-3497 Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration. | CVSS3: 7.5 | 2% Низкий | 5 месяцев назад |
| CVE-2026-3497 Vulnerability in the OpenSSH GSSAPI delta included in various Linux di ... | CVSS3: 7.5 | 2% Низкий | 5 месяцев назад |
 | RLSA-2026:6463 Important: openssh security update | 2% Низкий | 2 месяца назад | |
| RLSA-2026:6462 Important: openssh security update | 2% Низкий | 2 месяца назад | |
| RLSA-2026:6461 Important: openssh security update | 2% Низкий | 4 месяца назад | |
| GHSA-wcpp-3x59-h8vp Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type during the GSSAPI key exchange to the server, which will call the underlying function and continue the execution of the program without setting the related connection variables. As the variables are not initialized to NULL the code later accesses those uninitialized variables, accessing random memory, which could lead to undefined behavior. The recommended workaround is to use ssh_packet_disconnect() instead, which does terminate the process. The impact of the vulnerability depends heavily on the compiler flag hardening configuration. | CVSS3: 7.5 | 2% Низкий | 5 месяцев назад |
| ELSA-2026-6463 ELSA-2026-6463: openssh security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-6462 ELSA-2026-6462: openssh security update (IMPORTANT) | 4 месяца назад | ||
| ELSA-2026-6461 ELSA-2026-6461: openssh security update (IMPORTANT) | 4 месяца назад | ||
 | openSUSE-SU-2026:21044-1 Security update for openssh | около 1 месяца назад | ||
| SUSE-SU-2026:2395-1 Security update for openssh | около 2 месяцев назад | ||
| SUSE-SU-2026:2430-1 Security update for openssh8.4 | около 1 месяца назад | ||
| SUSE-SU-2026:2375-1 Security update for openssh | около 2 месяцев назад | ||
| SUSE-SU-2026:2371-1 Security update for openssh | около 2 месяцев назад |
Уязвимостей на страницу