| [CVE-2026-106589] In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can unexpectedly have root privileges. This is related to the GatewayPorts and StreamLocalForw | Low(2.9) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm; nvd · openssh · debian · 12 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm; nvd · openssh · debian · 12
|
| [CVE-2026-106583] In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection. | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm
|
| [CVE-2026-106587] In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled. | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm; nvd · openssh · debian · 12 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm; nvd · openssh · debian · 12
|
| [CVE-2026-106586] In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283. | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata · Corretta: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20 nvd · openssh · debian · bookworm; nvd · openssh 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata · Corretta: 1:10.2p1-2ubuntu3.8, 1:8.9p1-3ubuntu0.18, 1:9.6p1-3ubuntu13.20 nvd · openssh · debian · bookworm; nvd · openssh
|
| [CVE-2026-106585] In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data. | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm
|
| [CVE-2026-106584] In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarcti | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm
|
| [CVE-2026-106582] In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings. | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm
|
| [CVE-2026-106555] In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be persisted across authentication attempts. | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm
|
| [CVE-2026-106553] In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a GSSAPIAuthentication authentication attempt. | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm
|
| [CVE-2026-106552] In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation. | Medium(6.5) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata nvd · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata nvd · openssh · debian · bookworm
|
| [CVE-2016-20012] openssh: CVE-2016-20012 | Low | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12
|
| [CVE-2020-15778] openssh: CVE-2020-15778 | High(7.8) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata dsa · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata dsa · openssh · debian · bookworm
|
| [CVE-2020-14145] openssh: CVE-2020-14145 | Medium(5.9) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata dsa · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata dsa · openssh · debian · bookworm
|
| [CVE-2019-6110] openssh: CVE-2019-6110 | Medium(6.8) | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata dsa · openssh · debian · bookworm 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata dsa · openssh · debian · bookworm
|
| [CVE-2018-15919] openssh: CVE-2018-15919 | Low | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12
|
| [CVE-2008-3234] openssh: CVE-2008-3234 | Low | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12
|
| [CVE-2007-2768] openssh: CVE-2007-2768 | Low | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12
|
| [CVE-2007-2243] openssh: CVE-2007-2243 | Low | InteressataDettagli (2)1:9.2p1-2+deb12u9 · amd64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12 1:9.2p1-2+deb12u9 · arm64 · bookworm-security
Interessata dsa · openssh · debian · bookworm; dsa · openssh · debian · 12
|