A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).
References
Configurations
Configuration 1 (hide)
|
History
29 Oct 2026, 23:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
26 Oct 2026, 04:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Oct 2026, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 Oct 2026, 07:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
12 Oct 2026, 08:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Oct 2026, 03:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
06 Oct 2026, 16:17
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2026-06-23 04:17
Updated : 2026-10-30 08:16
NVD link : CVE-2026-55653
Mitre link : CVE-2026-55653
CVE.ORG link : CVE-2026-55653
JSON object : View
Products Affected
openbsd
- openssh
redhat
- openshift_container_platform
- enterprise_linux
- hardened_images
CWE
CWE-415
Double Free
