Comprueba tu versión
ssh -VRamas de versiones afectadas
- 10.6 1 CVE KEV 1
- 10.3 1 CVE KEV 1
- 10.0 2 CVE KEV 1
- 9.9 3 CVE KEV 1
- 9.8 2 CVE KEV 1
- 9.7 4 CVE KEV 1
- 9.6 4 CVE KEV 1
- 9.5 7 CVE KEV 1
- 9.3 7 CVE KEV 1
- 9.1 9 CVE KEV 1
- 8.9 8 CVE KEV 1
- 8.8 9 CVE KEV 1
- 8.7 8 CVE KEV 1
- 8.6 10 CVE KEV 1
- 8.5 10 CVE KEV 1
- 8.4 10 CVE KEV 1
- 8.3 11 CVE KEV 1
- 8.2 12 CVE KEV 1
- 8.1 11 CVE KEV 1
- 8.0 11 CVE KEV 1
- 7.9 10 CVE KEV 1
- 7.8 15 CVE KEV 1
- 7.7 16 CVE KEV 1
- 7.6 17 CVE KEV 1
- 7.4 17 CVE KEV 1
- 7.3 19 CVE KEV 1
- 7.2 23 CVE KEV 1
- 7.1 31 CVE KEV 1
- 7.0 31 CVE KEV 1
- 6.9 32 CVE KEV 1
- 6.8 35 CVE KEV 1
- 6.7 32 CVE KEV 1
- 6.6 32 CVE KEV 1
- 6.5 33 CVE KEV 1
- 6.4 34 CVE KEV 1
- 6.3 36 CVE KEV 1
- 6.2 36 CVE KEV 1
- 6.1 35 CVE KEV 1
- 6.0 35 CVE KEV 1
- 5.9 35 CVE KEV 1
- 5.8 35 CVE KEV 1
- 5.7 38 CVE KEV 1
- 5.6 38 CVE KEV 1
- 5.5 38 CVE KEV 1
- 5.4 38 CVE KEV 1
- 5.3 37 CVE KEV 1
- 5.2 37 CVE KEV 1
- 5.1 37 CVE KEV 1
- 5.0 37 CVE KEV 1
- 4.9 37 CVE KEV 1
- 4.8 39 CVE KEV 1
- 4.7 39 CVE KEV 1
- 4.6 39 CVE KEV 1
- 4.5 45 CVE KEV 1
- 4.4 42 CVE KEV 1
- 4.3 48 CVE KEV 1
- 4.2 46 CVE KEV 1
- 4.1 48 CVE KEV 1
- 4.0 49 CVE KEV 1
- 3.9 48 CVE KEV 1
- 3.8 50 CVE KEV 1
- 3.7 54 CVE KEV 1
- 3.6 56 CVE KEV 1
- 3.5 55 CVE KEV 1
- 3.4 55 CVE KEV 1
- 3.3 56 CVE KEV 1
- 3.2 59 CVE KEV 1
- 3.1 58 CVE KEV 1
- 3.0 62 CVE KEV 1
- 2.9 60 CVE KEV 1
- 2.5 60 CVE KEV 1
- 2.3 61 CVE KEV 1
- 2.2 62 CVE KEV 1
- 2.1 63 CVE KEV 1
- 2.0 54 CVE KEV 1
- 1.5 53 CVE KEV 1
- 1.3 53 CVE KEV 1
- 1.2 64 CVE KEV 1
Vulnerabilidades conocidas
| CVE | Título | Versiones afectadas | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|---|
| CVE-2026-123158 | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password... | < 10.6 = 10.6 | 8.1 | KEV | 18.9% | 2026-11-05 |
| CVE-2026-55654 | Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due... | * | 3.7 | — | 2026-06-23 | |
| CVE-2026-55655 | Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh... | * | 6.1 | — | 2026-06-23 | |
| CVE-2026-55653 | Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-grou... | * | 6.5 | — | 2026-06-23 | |
| CVE-2026-35386 | In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command li... | ≥ 10.0 < 10.3 | 8.1 | — | 2026-04-02 | |
| CVE-2026-3497 | Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects... | * | 6.9 | — | 2026-03-12 | |
| CVE-2025-26466 | Openssh: denial-of-service in openssh | = 9.5 = 9.6 = 9.7 | 5.9 | — | 2025-02-28 | |
| CVE-2025-26465 | Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled | ≥ 6.9 ≤ 9.8 = 6.8 = 9.9 | 6.8 | — | 2025-02-18 | |
| CVE-2024-6387 | Openssh: regresshion - race condition in ssh allows rce/dos | < 4.4 ≥ 8.6 ≤ 9.8 = 4.4 | 8.1 | — | 2024-07-01 | |
| CVE-2023-51767 | OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication b... | * | 7.0 | — | 2023-12-24 | |
| CVE-2023-51384 | In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied. When destinat... | ≥ 8.9 < 9.6 | 5.5 | — | 2023-12-18 | |
| CVE-2023-51385 | In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metachara... | < 9.6 | 6.5 | — | 2023-12-18 | |
| CVE-2023-48795 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, al... | < 9.6 | 5.9 | — | 2023-12-18 | |
| CVE-2023-38408 | The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leadin... | < 9.3 = 9.3 | 9.8 | — | 2023-07-20 | |
| CVE-2023-28531 | ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constr... | ≥ 8.9 < 9.3 | 9.8 | — | 2023-03-17 | |
| CVE-2023-25136 | OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This... | = 9.1 | 6.5 | — | 2023-02-03 | |
| CVE-2021-36368 | An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwa... | < 8.9 | 3.7 | — | 2022-03-13 | |
| CVE-2021-41617 | sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege... | ≥ 6.2 < 8.8 | 7.0 | — | 2021-09-26 | |
| CVE-2016-20012 | OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and p... | ≤ 8.7 | 5.3 | — | 2021-09-15 | |
| CVE-2021-28041 | ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as... | ≥ 8.2 < 8.5 | 7.1 | — | 2021-03-05 | |
| CVE-2020-15778 | scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backt... | < 8.3 = 8.3 | 7.4 | — | 2020-07-24 | |
| CVE-2020-14145 | The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the... | ≥ 5.7 < 8.4 = 8.4 = 8.5 | 5.9 | — | 2020-06-29 | |
| CVE-2020-12062 | The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call fa... | = 8.2 | 7.5 | — | 2020-06-01 | |
| CVE-2019-16905 | OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authenticat... | ≥ 7.7 ≤ 7.9 ≥ 8.0 < 8.1 | 7.8 | — | 2019-10-09 | |
| CVE-2019-6109 | An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious... | ≤ 7.9 | 6.8 | — | 2019-01-31 | |
| CVE-2019-6110 | In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (o... | ≤ 7.9 | 6.8 | — | 2019-01-31 | |
| CVE-2019-6111 | An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server... | ≤ 7.9 | 5.9 | — | 2019-01-31 | |
| CVE-2018-20685 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via t... | ≤ 7.9 | 5.3 | — | 2019-01-10 | |
| CVE-2018-15919 | Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detec... | ≥ 5.9 ≤ 7.8 | 5.3 | — | 2018-08-28 | |
| CVE-2018-15473 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid au... | ≤ 7.7 | 5.3 | — | 2018-08-17 | |
| CVE-2016-10708 | sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and... | < 7.4 | 7.5 | — | 2018-01-21 | |
| CVE-2017-15906 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in... | < 7.6 | 5.3 | — | 2017-10-26 | |
| CVE-2016-1908 | The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies o... | < 7.2 | 9.8 | — | 2017-04-11 | |
| CVE-2016-6210 | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on... | ≤ 7.2 | 5.9 | — | 2017-02-13 | |
| CVE-2016-10009 | Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers... | ≤ 7.3 | 7.3 | — | 2017-01-05 | |
| CVE-2016-10010 | sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as ro... | ≤ 7.3 | 7.0 | — | 2017-01-05 | |
| CVE-2016-10011 | authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents,... | ≤ 7.3 | 6.2 | — | 2017-01-05 | |
| CVE-2016-10012 | The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does... | ≤ 7.3 | 7.8 | — | 2017-01-05 | |
| CVE-2016-8858 | The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a... | = 6.8 = 6.9 = 7.0 | 7.5 | — | 2016-12-09 | |
| CVE-2016-6515 | The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for... | ≤ 7.2 | 7.5 | — | 2016-08-07 | |
| CVE-2015-8325 | The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled... | ≤ 7.2 | 7.8 | — | 2016-05-01 | |
| CVE-2016-3115 | Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticate... | ≤ 7.2 | 6.4 | — | 2016-03-22 | |
| CVE-2016-1907 | The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a deni... | = 6.8 = 6.9 = 7.0 | 5.3 | — | 2016-01-19 | |
| CVE-2016-0778 | The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, an... | = 5.4 = 5.5 = 5.6 | 8.1 | — | 2016-01-14 | |
| CVE-2016-0777 | The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows r... | = 5.0 = 5.1 = 5.2 | 6.5 | — | 2016-01-14 | |
| CVE-2015-6565 | sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause... | = 6.8 = 6.9 | 7.2 | — | 2015-08-24 | |
| CVE-2015-6564 | Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0... | ≤ 6.9 | 7.0 | — | 2015-08-24 | |
| CVE-2015-6563 | The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data... | ≤ 6.9 | 6.4 | — | 2015-08-24 | |
| CVE-2015-5600 | The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the... | ≤ 6.9 | 8.1 | — | 2015-08-03 | |
| CVE-2015-5352 | The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not us... | ≤ 6.8 | 4.3 | — | 2015-08-03 | |
| CVE-2014-9278 | The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environmen... | * | 4.0 | — | 2014-12-06 | |
| CVE-2014-2653 | The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to... | ≤ 6.6 = 6.0 = 6.1 | 6.5 | — | 2014-03-27 | |
| CVE-2014-2532 | sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows... | ≤ 6.5 = 6.0 = 6.1 | 4.2 | — | 2014-03-18 | |
| CVE-2011-4327 | ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with uninte... | ≤ 5.8 = 1.2 = 1.2.1 | 5.5 | — | 2014-02-03 | |
| CVE-2014-1692 | The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PA... | ≤ 6.4 | 7.3 | — | 2014-01-29 | |
| CVE-2013-4548 | The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is... | = 6.2 = 6.3 | 6.0 | — | 2013-11-08 | |
| CVE-2010-5107 | The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connec... | ≤ 6.1 = 1.2 = 1.2.1 | 7.5 | — | 2013-03-07 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).