DeutschShown in its original language — a full translation is planned for a future version.
OpenSSH: Mehrere Schwachstellen
view advisory published 2026-08-10
Ein Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um Sicherheitsvorkehrungen zu umgehen, einen Denial of Service und potentiell Codeausführung zu erreichen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-73283US | — | — | ||
In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. | ||||
| CVE-2026-73282US | — | — | ||
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. | ||||
| CVE-2026-73281US | — | — | ||
In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2026:69130 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:69266 vom 2026-09-21external
- Red Hat Security Advisory RHSA-2026:70719 vom 2026-09-23external
- Red Hat Security Advisory RHSA-2026:76748 vom 2026-10-06external
- Rocky Linux Security Advisory RLSA-2026:69129 vom 2026-09-22external
- Rocky Linux Security Advisory RLSA-2026:69130 vom 2026-09-22external
- Rocky Linux Security Advisory RLSA-2026:69266 vom 2026-09-22external
- Rocky Linux Security Advisory RLSA-2026:88211 vom 2026-10-23external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan