Known vulnerabilities in openssh (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:openssh_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 66
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssh (Debian package) openssh (Debian package) is affected by 66 known vulnerabilities: 5 high, 32 medium, 29 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124014 - Resource Management Errors
CVE-2026-3497
CWE-399 Low
No
No
1:9.2p1-2+deb12u9, 1:10.0p1-7+deb13u2 13.03.2026 SB2026031837
SB2026031838
SB2026031839
and 19 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character
CVE-2025-61985
CWE-158 Low
No
No
1:9.2p1-2+deb12u9, 1:10.0p1-7+deb13u2 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 25 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-61984
CWE-78 Low
No
No
1:9.2p1-2+deb12u9, 1:10.0p1-7+deb13u2 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 27 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465
CWE-300 Medium
No
No
1:9.2p1-2+deb12u5 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
1:9.2p1-2+deb12u3 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU84792 - Inadequate Encryption Strength
CVE-2023-51384
CWE-326 Low
No
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 27.12.2023 SB2023121905
SB2023122710
SB2024010337
and 5 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Available
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU73775 - Credentials Management
CVE-2023-28531
CWE-255 Low
No
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 17.03.2023 SB2023031706
SB2023031713
SB2023062110
and 5 more
#VU58333 - Improper Privilege Management
CVE-2021-41617
CWE-269 Low
No
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 23.11.2021 SB2021092601
SB2021112330
SB2021120119
and 38 more
#VU31989 - Memory corruption
CVE-2017-16231
CWE-119 Low
No
No
- 21.03.2019 SB2019032125
SB2017112322
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109
CWE-451 Low
No
No
1:7.4p1-10+deb9u5 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16988 - Improper input validation
CVE-2019-6111
CWE-20 Low
Available
No
1:7.4p1-10+deb9u5 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU16946 - Improper Access Control
CVE-2018-20685
CWE-284 Low
No
No
1:7.4p1-10+deb9u5 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more
#VU14548 - Exposure of sensitive information to an unauthorized actor
CVE-2018-15919
CWE-200 Low
No
No
- 28.08.2018 SB2018082902
SB2018111705
SB2018082817
and 5 more
#VU14440 - Error Handling
CVE-2018-15473
CWE-388 Medium
Available
No
1:6.7p1-5+deb8u7, 1:7.4p1-10+deb9u4, 1:7.9p1-4 17.08.2018 SB2018081603
SB2018082309
SB2018090702
and 19 more
#VU14163 - NULL Pointer Dereference
CVE-2016-10708
CWE-476 Low
No
No
1:6.0p1-4+deb7u7, 1:6.7p1-5+deb8u6, 1:7.4p1-1 31.07.2018 SB2017032008
SB2018072801
SB2018012101
and 7 more
#VU9333 - Permissions, Privileges, and Access Controls
CVE-2017-15906
CWE-264 Low
No
No
1:6.7p1-5+deb8u7, 1:7.4p1-10+deb9u4, 1:7.6p1-1, 1:7.9p1-4 15.11.2017 SB2017111501
SB2017111502
SB2018010803
and 14 more
#VU32174 - Out-of-bounds read
CVE-2014-8127
CWE-125 Medium
No
No
- 26.06.2017 SB2017062614
SB2017011322
SB2017040847
#VU32124 - Divide By Zero
CVE-2017-7598
CWE-369 Low
No
No
- 09.04.2017 SB2017040906
SB2017042526
SB2017042844
and 3 more


Showing elements 1 - 20 out of 66