Known vulnerabilities in openssh (Red Hat package)
Vendor:
Red Hat Inc.
Software:
openssh (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:openssh_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
28
Public exploits:
5
Known exploited (KEV):
0
Breakdown by Severity Chart
8.0p1-34.el8_10
9.9p1-12.el9_8
9.9p1-28.el10_2
9.9p1-11.el9_8
8.0p1-33.el8_10
9.9p1-27.el10_2
8.7p1-45.el9_6.4
9.9p1-7.el10_0.4
9.9p1-9.el9_8
9.9p1-25.el10_2
5.3p1-125.el6_10.1
7.4p1-23.el7_9.2
8.7p1-30.el9_2.11
8.0p1-7.el8_4.2
8.0p1-15.el8_6.5
8.0p1-20.el8_8.4
9.9p1-7.el9_8
8.7p1-45.el9_6.3
8.0p1-7.el8_4.1
8.0p1-20.el8_8.3
8.7p1-13.el9_0.2
8.0p1-29.el8_10
8.7p1-49.el9_7
9.9p1-14.el10_1
9.9p1-7.el10_0.3
8.7p1-30.el9_2.10
8.7p1-38.el9_4.7
8.7p1-45.el9_6.2
9.9p1-7.el10_0.2
8.7p1-48.el9_7
8.7p1-30.el9_2.9
8.7p1-13.el9_0.1
9.9p1-7.el10_0.1
8.7p1-38.el9_4.6
8.7p1-45.el9_6.1
8.7p1-47.el9_7
8.0p1-27.el8_10
8.7p1-46.el9
8.0p1-26.el8_10
8.7p1-45.el9
6.6.1p1-31.el7
5.3p1-117.el6
6.6.1p1-25.el7_2
5.3p1-114.el6_7
6.6.1p1-22.el7
7.4p1-11.el7
5.3p1-122.el6
8.7p1-38.el9_4.5
8.7p1-12.el9_0.3
8.7p1-30.el9_2.7
8.7p1-38.el9_4.4
8.7p1-30.el9_2.4
6.6.1p1-11.el7
5.3p1-104.el6
5.3p1-94.el6
5.3p1-84.1.el6
5.3p1-81.el6
4.3p2-36.el5_4.2
4.3p2-36.el5
3.9p1-11.el4_7
4.3p2-26.el5_2.1
4.3p2-24.el5
8.0p1-24.el8
8.7p1-34.el9_3.3
8.0p1-19.el8_9.2
5.3p1-125.el6_10
8.0p1-19.el8_8
8.0p1-15.el8_6
8.7p1-30.el9_2
8.0p1-5.el8_2
8.0p1-5.el8_1.1
7.4p1-23.el7_9
8.0p1-7.el8_4
8.7p1-11.el9_0
8.7p1-29.el9_2
8.0p1-10.el8
8.0p1-13.el8
Vulnerabilities (28)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU146881 - Improper Access Control CVE-2026-73281 |
CWE-284 | Low | 9.9p1-27.el10_2 | 03.09.2026 |
SB2026090365 SB2026090366 SB2026090513 and 2 more |
||
| #VU146882 - Use After Free CVE-2026-73282 |
CWE-416 | Low | 8.0p1-33.el8_10, 9.9p1-27.el10_2 | 03.09.2026 |
SB2026090365 SB2026090366 SB2026092042 and 6 more |
||
| #VU146883 - Improper Access Control CVE-2026-73283 |
CWE-284 | Low | 8.0p1-34.el8_10, 9.9p1-27.el10_2 | 03.09.2026 |
SB2026090365 SB2026090366 SB2026092042 and 4 more |
||
| #VU137698 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-59995 |
CWE-22 | Low | 8.0p1-33.el8_10, 9.9p1-27.el10_2 | 15.07.2026 |
SB2026071535 SB20260715100 SB20260728131 and 12 more |
||
| #VU137701 - Improper Access Control CVE-2026-59999 |
CWE-284 | Low | 8.0p1-33.el8_10, 9.9p1-27.el10_2 | 15.07.2026 |
SB2026071535 SB20260715100 SB20260728131 and 11 more |
||
| #VU137703 - Protection Mechanism Failure CVE-2026-60001 |
CWE-693 | Medium | 8.0p1-34.el8_10, 9.9p1-12.el9_8, 9.9p1-28.el10_2 | 15.07.2026 |
SB2026071535 SB20260715100 SB20260728131 and 11 more |
||
| #VU137704 - Use After Free CVE-2026-60002 |
CWE-416 | Low | 8.7p1-45.el9_6.4, 9.9p1-7.el10_0.4 | 15.07.2026 |
SB2026071535 SB20260715100 SB2026071797 and 10 more |
||
| #VU128473 - Improper input validation CVE-2026-35386 |
CWE-20 | Low | 8.0p1-7.el8_4.2, 8.0p1-15.el8_6.5, 8.0p1-20.el8_8.4, 8.0p1-29.el8_10, 8.7p1-30.el9_2.11, 8.7p1-45.el9_6.3, 8.7p1-49.el9_7, 9.9p1-7.el10_0.3, 9.9p1-14.el10_1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 17 more |
||
| #VU128474 - Improper Access Control CVE-2026-35414 |
CWE-284 | Low | 8.0p1-7.el8_4.2, 8.0p1-15.el8_6.5, 8.0p1-20.el8_8.4, 8.0p1-29.el8_10, 8.7p1-30.el9_2.11, 8.7p1-45.el9_6.3, 8.7p1-49.el9_7, 9.9p1-7.el10_0.3, 9.9p1-14.el10_1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 25 more |
||
| #VU128475 - Improper Privilege Management CVE-2026-35385 |
CWE-269 | Low | 5.3p1-125.el6_10.1, 7.4p1-23.el7_9.2, 8.0p1-7.el8_4.2, 8.0p1-15.el8_6.5, 8.0p1-20.el8_8.4, 8.0p1-29.el8_10, 8.7p1-30.el9_2.11, 8.7p1-45.el9_6.3, 8.7p1-49.el9_7, 9.9p1-7.el10_0.3, 9.9p1-14.el10_1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 34 more |
||
| #VU128476 - Improper Access Control CVE-2026-35387 |
CWE-284 | Low | 8.0p1-7.el8_4.2, 8.0p1-15.el8_6.5, 8.0p1-20.el8_8.4, 8.0p1-29.el8_10, 8.7p1-30.el9_2.11, 8.7p1-45.el9_6.3, 8.7p1-49.el9_7, 9.9p1-7.el10_0.3, 9.9p1-14.el10_1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 18 more |
||
| #VU128477 - Improper Authorization CVE-2026-35388 |
CWE-285 | Low | 8.0p1-7.el8_4.2, 8.0p1-15.el8_6.5, 8.0p1-20.el8_8.4, 8.0p1-29.el8_10, 8.7p1-30.el9_2.11, 8.7p1-45.el9_6.3, 8.7p1-49.el9_7, 9.9p1-7.el10_0.3, 9.9p1-14.el10_1 | 29.04.2026 |
SB2026042988 SB2026042990 SB2026042992 and 19 more |
||
| #VU124014 - Resource Management Errors CVE-2026-3497 |
CWE-399 | Low | 8.0p1-7.el8_4.1, 8.0p1-20.el8_8.3, 8.7p1-13.el9_0.2, 8.7p1-30.el9_2.10, 8.7p1-38.el9_4.7, 8.7p1-45.el9_6.2, 9.9p1-7.el10_0.2 | 13.03.2026 |
SB2026031837 SB2026031838 SB2026031839 and 19 more |
||
| #VU116883 - Improper Neutralization of Null Byte or NUL Character CVE-2025-61985 |
CWE-158 | Low | 8.0p1-27.el8_10, 8.7p1-13.el9_0.1, 8.7p1-30.el9_2.9, 8.7p1-38.el9_4.6, 8.7p1-45.el9_6.1, 9.9p1-7.el10_0.1 | 10.10.2025 |
SB2025101008 SB2025103199 SB20251031100 and 26 more |
||
| #VU116882 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2025-61984 |
CWE-78 | Low | 8.0p1-27.el8_10, 8.7p1-13.el9_0.1, 8.7p1-30.el9_2.9, 8.7p1-38.el9_4.6, 8.7p1-45.el9_6.1, 9.9p1-7.el10_0.1 | 10.10.2025 |
SB2025101008 SB2025103199 SB20251031100 and 28 more |
||
| #VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2025-26465 |
CWE-300 | Medium | 8.0p1-26.el8_10, 8.7p1-38.el9_4.5 | 18.02.2025 |
SB2025021815 SB2025021830 SB2025021833 and 49 more |
||
| #VU94522 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-6409 |
CWE-362 | High | 8.7p1-12.el9_0.3, 8.7p1-30.el9_2.7, 8.7p1-38.el9_4.4 | 18.07.2024 |
SB2024070144 SB2024071838 SB20240718188 and 17 more |
||
| #VU84789 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-51385 |
CWE-78 | Medium | 8.0p1-7.el8_4.2, 8.0p1-19.el8_9.2, 8.7p1-13.el9_0.1, 8.7p1-34.el9_3.3 | 26.12.2023 |
SB2023121905 SB2023122710 SB2023122801 and 65 more |
||
| #VU78454 - Untrusted Search Path CVE-2023-38408 |
CWE-426 | Medium | 5.3p1-125.el6_10, 7.4p1-23.el7_9, 8.0p1-5.el8_1.1, 8.0p1-5.el8_2, 8.0p1-7.el8_4, 8.0p1-15.el8_6, 8.0p1-19.el8_8, 8.0p1-33.el8_10, 8.7p1-11.el9_0, 8.7p1-30.el9_2 | 20.07.2023 |
SB2023072068 SB2023072073 SB2023072074 and 74 more |
||
| #VU251 - Permissions, Privileges, and Access Controls CVE-2015-8325 |
CWE-264 | Low | 6.6.1p1-31.el7 | 02.08.2016 |
SB2016080201 SB2016080202 SB2016080203 and 10 more |
Showing elements 1 - 20 out of 28