Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 9

Количество 9

github логотип

GHSA-5mx2-7g4j-9m39

3 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
EPSS: Низкий
ubuntu логотип

CVE-2026-55654

3 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
EPSS: Низкий
redhat логотип

CVE-2026-55654

3 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
EPSS: Низкий
nvd логотип

CVE-2026-55654

3 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
EPSS: Низкий
debian логотип

CVE-2026-55654

3 месяца назад

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds ...

CVSS3: 3.7
EPSS: Низкий
rocky логотип

RLSA-2026:47757

около 2 месяцев назад

Important: openssh security update

EPSS: Низкий
rocky логотип

RLSA-2026:47756

около 2 месяцев назад

Important: openssh security update

EPSS: Низкий
oracle-oval логотип

ELSA-2026-47757

около 2 месяцев назад

ELSA-2026-47757: openssh security update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2026-47756

около 2 месяцев назад

ELSA-2026-47756: openssh security update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
github логотип
GHSA-5mx2-7g4j-9m39

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
0%
Низкий
3 месяца назад
ubuntu логотип
CVE-2026-55654

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
0%
Низкий
3 месяца назад
redhat логотип
CVE-2026-55654

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
0%
Низкий
3 месяца назад
nvd логотип
CVE-2026-55654

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

CVSS3: 3.7
0%
Низкий
3 месяца назад
debian логотип
CVE-2026-55654

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds ...

CVSS3: 3.7
0%
Низкий
3 месяца назад
rocky логотип
RLSA-2026:47757

Important: openssh security update

около 2 месяцев назад
rocky логотип
RLSA-2026:47756

Important: openssh security update

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-47757

ELSA-2026-47757: openssh security update (IMPORTANT)

около 2 месяцев назад
oracle-oval логотип
ELSA-2026-47756

ELSA-2026-47756: openssh security update (IMPORTANT)

около 2 месяцев назад

Уязвимостей на страницу