Known vulnerabilities in openssh (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:openssh_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 66
Public exploits: 8
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssh (Debian package) openssh (Debian package) is affected by 66 known vulnerabilities: 5 high, 32 medium, 29 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU124014 - Resource Management Errors
CVE-2026-3497
CWE-399 Low
No
No
1:9.2p1-2+deb12u9, 1:10.0p1-7+deb13u2 13.03.2026 SB2026031837
SB2026031838
SB2026031839
and 19 more
#VU116883 - Improper Neutralization of Null Byte or NUL Character
CVE-2025-61985
CWE-158 Low
No
No
1:9.2p1-2+deb12u9, 1:10.0p1-7+deb13u2 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 26 more
#VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-61984
CWE-78 Low
No
No
1:9.2p1-2+deb12u9, 1:10.0p1-7+deb13u2 10.10.2025 SB2025101008
SB2025103199
SB20251031100
and 28 more
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465
CWE-300 Medium
No
No
1:9.2p1-2+deb12u5 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
1:9.2p1-2+deb12u3 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU84792 - Inadequate Encryption Strength
CVE-2023-51384
CWE-326 Low
No
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 27.12.2023 SB2023121905
SB2023122710
SB2024010337
and 5 more
#VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-51385
CWE-78 Medium
Available
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 26.12.2023 SB2023121905
SB2023122710
SB2023122801
and 65 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795
CWE-326 Low
Available
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 344 more
#VU73775 - Credentials Management
CVE-2023-28531
CWE-255 Low
No
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 17.03.2023 SB2023031706
SB2023031713
SB2023062110
and 5 more
#VU58333 - Improper Privilege Management
CVE-2021-41617
CWE-269 Low
No
No
1:8.4p1-5+deb11u3, 1:9.2p1-2+deb12u2 23.11.2021 SB2021092601
SB2021112330
SB2021120119
and 38 more
#VU32197 - Heap-based Buffer Overflow
CVE-2016-3991
CWE-122 Medium
No
No
- 21.09.2016 SB2016092137
SB2016121617
#VU32196 - Heap-based Buffer Overflow
CVE-2016-3990
CWE-122 Medium
No
No
- 21.09.2016 SB2016092136
SB2016121616
#VU32278 - Memory corruption
CVE-2015-8683
CWE-119 Low
No
No
- 13.04.2016 SB2016041310
SB2016070420
SB2022021828
and 1 more
#VU32276 - Memory corruption
CVE-2015-8665
CWE-119 Low
No
No
- 13.04.2016 SB2016041309
SB2016070417
SB2022021828
and 1 more
#VU32277 - Out-of-bounds write
CVE-2015-8781
CWE-787 Medium
No
No
- 01.02.2016 SB2016020102
SB2016070418
#VU32525 - Memory corruption
CVE-2013-4244
CWE-119 Medium
No
No
- 28.09.2013 SB2013092802
SB2014062402
SB2014062601
and 3 more
#VU32637 - Heap-based Buffer Overflow
CVE-2013-1960
CWE-122 High
No
No
- 03.07.2013 SB2013070302
SB2013080702
SB2014022105
and 2 more
#VU32749 - Heap-based Buffer Overflow
CVE-2012-4564
CWE-122 Medium
No
No
- 11.11.2012 SB2012111104
SB2012120602
SB2012122003
and 3 more
#VU32773 - Heap-based Buffer Overflow
CVE-2012-3401
CWE-122 Medium
No
No
- 13.08.2012 SB2012081302
SB2012081514
SB2012122003
and 1 more
#VU32782 - Heap-based Buffer Overflow
CVE-2012-2088
CWE-122 Medium
No
No
- 22.07.2012 SB2012072201
SB2012072303
SB2012071905
and 3 more


Showing elements 1 - 20 out of 66