Debian OpenSSH vulnerabilities

CVE-2016-0778 [HIGH] CVE-2016-0778: openssh - The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the ... The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by req

CVE-2006-5051 [HIGH] CVE-2006-5051: openssh - Signal handler race condition in OpenSSH before 4.4 allows remote attackers to c... Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free. Scope: local bookworm: resolved (fixed in 1:4.6p1-1) bullseye: resolved (fixed in 1:4.6p1-1) forky: resolved (fixed in 1:4.6p1-1) s

CVE-2023-51385 [MEDIUM] CVE-2023-51385: openssh - In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or... In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name. Scope: local bookworm: resolved (fixed in 1:9.2p1-2+deb12u2

CVE-2008-5161 [LOW] CVE-2008-5161: openssh - Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Conne... Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) Ope

CVE-2015-5600 [HIGH] CVE-2015-5600: openssh - The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 ... The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices

CVE-2025-26466 [MEDIUM] CVE-2025-26466: openssh - A flaw was found in the OpenSSH package. For each ping packet the SSH server rec... A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Co

CVE-2023-28531 [CRITICAL] CVE-2023-28531: openssh - ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the inten... ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9. Scope: local bookworm: resolved (fixed in 1:9.2p1-2+deb12u2) bullseye: resolved forky: resolved (fixed in 1:9.3p1-1) sid: resolved (fixed in 1:9.3p1-1) trixie: resolved (fixed in 1:9.3p1-1)

CVE-2016-8858 [HIGH] CVE-2016-8858: openssh - The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allow... The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue." Scope: local bookworm: resolved (fixed in 1:7.3p1-2) bullseye: resolved (fixed in

CVE-2026-3497 [MEDIUM] CVE-2026-3497: openssh - Vulnerability in the OpenSSH GSSAPI delta included in various Linux distribution... Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on an error, which does not terminate the process, allows an attacker to send an unexpected GSSAPI message type

CVE-2002-0639 [CRITICAL] CVE-2002-0639: openssh - Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to... Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication. Scope: local bookworm: resolved (fixed in 1:3.4) bullseye: resolved (fixed in 1:3.4) forky: resolved (fixed in 1:3.4) sid: resolved

CVE-2020-12062 [HIGH] CVE-2020-12062: openssh - The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the serve... The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client's download directory by creating a crafted subdirectory anywhere on the remote server. The victim must use the command scp -rp to download a fil

CVE-2000-0992 [MEDIUM] CVE-2000-0992: openssh - Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote maliciou... Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. Scope: local bookworm: resolved (fixed in 1:3.9p1-1) bullseye: resolved (fixed in 1:3.9p1-1) forky: resolved (fixed in 1:3.9p1-1) sid: resolved (fixed in 1:3.9p1-1) trixie: resolved (fixed in 1:3.9p1-1)

CVE-2025-26465 [MEDIUM] CVE-2025-26465: openssh - A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled... A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed by a malicious machine impersonating a legit server. This issue occurs due to how OpenSSH mishandles error codes in specific conditions when verifying the host key. For an attack to be considered successful, the attacker needs to manage

CVE-2010-5107 [MEDIUM] CVE-2010-5107: openssh - The default configuration of OpenSSH through 6.1 enforces a fixed time limit bet... The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. Scope: local bookworm: resolved (fixed in 1:6.0p1-4) bullseye: resolved (fixed

CVE-2016-10708 [HIGH] CVE-2016-10708: openssh - sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service ... sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c. Scope: local bookworm: resolved (fixed in 1:7.4p1-1) bullseye: resolved (fixed in 1:7.4p1-1) forky: resolved (fixed in 1:7.4p1-1) sid: resolved

CVE-2003-0786 [CRITICAL] CVE-2003-0786: openssh - The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, whe... The SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege Separation is disabled, does not check the result of the authentication attempt, which can allow remote attackers to gain privileges. Scope: local bookworm: resolved (fixed in 1:3.7.1p2) bullseye: resolved (fixed in 1:3.7.1p2) forky: resolved (fixed in 1:3.7.1p2) sid: resol

CVE-2019-16905 [HIGH] CVE-2019-16905: openssh - OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental k... OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in al

CVE-2016-10012 [HIGH] CVE-2016-10012: openssh - The shared memory manager (associated with pre-authentication compression) in ss... The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures. Scope: local bookworm: resolve

CVE-2003-0693 [CRITICAL] CVE-2003-0693: openssh - A "buffer management error" in buffer_append_space of buffer.c for OpenSSH befor... A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695. Scope: local bookworm: resolved (fixed in 1:3.6.1p2-6.0) bullseye: resolved (fixed in 1:3.6.1p2-6.0) fo

CVE-2024-39894 [HIGH] CVE-2024-39894: openssh - OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-... OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur. Scope: local bookworm: resolved bullseye: resolved forky: resolved (fixed in 1:9.8p1-1) sid: resolved (fixed in 1:9.8p1-1) tri