Filtered by vendor Openbsd
Subscribe
Total
367 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-106582 | 1 Openbsd | 1 Openssh | 2026-10-13 | N/A | 3.7 LOW |
| In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is contraindicated by the arXiv 2609.07709 "Crossing the Streams" findings. | |||||
| CVE-2026-106584 | 1 Openbsd | 1 Openssh | 2026-10-13 | N/A | 2.5 LOW |
| In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can be a slightly more severe effect on users in certain Antarctic locations. | |||||
| CVE-2026-106586 | 1 Openbsd | 1 Openssh | 2026-10-13 | N/A | 2.5 LOW |
| In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a different vulnerability than CVE-2026-73283. | |||||
| CVE-2026-106587 | 1 Openbsd | 1 Openssh | 2026-10-09 | N/A | 3.6 LOW |
| In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean that a feature is disabled. | |||||
| CVE-2026-55654 | 2 Openbsd, Redhat | 3 Openssh, Enterprise Linux, Hardened Images | 2026-09-24 | N/A | 3.7 LOW |
| A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service. | |||||
| CVE-2000-0993 | 3 Freebsd, Netbsd, Openbsd | 3 Freebsd, Netbsd, Openbsd | 2026-09-23 | 7.2 HIGH | N/A |
| Format string vulnerability in pw_error function in BSD libutil library allows local users to gain root privileges via a malformed password in commands such as chpass or passwd. | |||||
| CVE-2000-0992 | 2 Openbsd, Ssh | 2 Openssh, Ssh | 2026-09-23 | 5.0 MEDIUM | N/A |
| Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack. | |||||
| CVE-2000-0994 | 1 Openbsd | 1 Openbsd | 2026-09-23 | 7.2 HIGH | N/A |
| Format string vulnerability in OpenBSD fstat program (and possibly other BSD-based operating systems) allows local users to gain root privileges via the PWD environmental variable. | |||||
| CVE-2000-0997 | 2 Netbsd, Openbsd | 2 Netbsd, Openbsd | 2026-09-23 | 7.2 HIGH | N/A |
| Format string vulnerabilities in eeprom program in OpenBSD, NetBSD, and possibly other operating systems allows local attackers to gain root privileges. | |||||
| CVE-2000-0996 | 1 Openbsd | 1 Openbsd | 2026-09-23 | 7.2 HIGH | N/A |
| Format string vulnerability in OpenBSD su program (and possibly other BSD-based operating systems) allows local attackers to gain root privileges via a malformed shell. | |||||
| CVE-2000-0995 | 1 Openbsd | 1 Openbsd | 2026-09-23 | 7.2 HIGH | N/A |
| Format string vulnerability in OpenBSD yp_passwd program (and possibly other BSD-based operating systems) allows attackers to gain root privileges a malformed name. | |||||
| CVE-2000-0914 | 1 Openbsd | 1 Openbsd | 2026-09-23 | 5.0 MEDIUM | N/A |
| OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests. | |||||
| CVE-2026-35385 | 1 Openbsd | 1 Openssh | 2026-09-01 | N/A | 7.5 HIGH |
| In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (preserve mode). | |||||
| CVE-2026-35414 | 1 Openbsd | 1 Openssh | 2026-07-24 | N/A | 4.2 MEDIUM |
| OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that makes certain use of comma characters. | |||||
| CVE-2026-35387 | 1 Openbsd | 1 Openssh | 2026-07-24 | N/A | 3.1 LOW |
| OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in PubkeyAcceptedAlgorithms or HostbasedAcceptedAlgorithms is misinterpreted to mean all ECDSA algorithms. | |||||
| CVE-2026-35388 | 1 Openbsd | 1 Openssh | 2026-07-24 | N/A | 2.5 LOW |
| OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. | |||||
| CVE-2026-35386 | 1 Openbsd | 1 Openssh | 2026-07-24 | N/A | 3.6 LOW |
| In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario where the username on the command line is untrusted, and also requires a non-default configurations of % in ssh_config. | |||||
| CVE-2026-55706 | 1 Openbsd | 1 Openbsd | 2026-07-13 | N/A | 5.8 MEDIUM |
| sppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths. | |||||
| CVE-2026-57589 | 1 Openbsd | 1 Openbsd | 2026-07-10 | N/A | 7.4 HIGH |
| sys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-after-free after tsleep in sys_semget(). | |||||
| CVE-2026-41285 | 1 Openbsd | 1 Openbsd | 2026-06-17 | N/A | 4.3 MEDIUM |
| In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with length zero, because of an "nd_opt_len * 8 - 2" expression with no preceding check for whether nd_opt_len is zero. | |||||