Every CVE Search/ Get API key

CVE-2025-61984

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...

3.6 LowPublic exploitFix available

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

0.46%Up 0.5 points since Oct 7, 2025
90%50%10%1%

What each source reports

CVE List Score used 3.6

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
CVE-2025-61984
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-159
Updated
2026-11-02
EUVDEUVD-2025-32089 3.6

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
EUVD-2025-32089
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-hh67-847q-q3h9 3.6

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
GHSA-hh67-847q-q3h9
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-159
Updated
2026-11-02
NVD 3.6

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
CVE-2025-61984
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-159
Updated
2026-11-02
OSVALPINE-CVE-2025-61984 3.6

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
ALPINE-CVE-2025-61984
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVBELL-CVE-2025-61984 3.6
Record
BELL-CVE-2025-61984
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
Show 41 moreShow less
OSVDEBIAN-CVE-2025-61984 3.6

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
DEBIAN-CVE-2025-61984
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVJLSEC-2025-7 3.6

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
JLSEC-2025-7
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2582 3.6

openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and sophisticated configuration options.

Security Fix(es):

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)(CVE-2025-61984)

ssh in OpenSSH before 10.1 allows the 0 character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.(CVE-2025-61985)

Record
OESA-2025-2582
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2583 3.6

openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and sophisticated configuration options.

Security Fix(es):

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)(CVE-2025-61984)

ssh in OpenSSH before 10.1 allows the 0 character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.(CVE-2025-61985)

Record
OESA-2025-2583
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2584 3.6

openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and sophisticated configuration options.

Security Fix(es):

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)(CVE-2025-61984)

ssh in OpenSSH before 10.1 allows the 0 character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.(CVE-2025-61985)

Record
OESA-2025-2584
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2585 3.6

openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and sophisticated configuration options.

Security Fix(es):

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)(CVE-2025-61984)

ssh in OpenSSH before 10.1 allows the 0 character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.(CVE-2025-61985)

Record
OESA-2025-2585
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2586 3.6

openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and sophisticated configuration options.

Security Fix(es):

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)(CVE-2025-61984)

ssh in OpenSSH before 10.1 allows the 0 character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.(CVE-2025-61985)

Record
OESA-2025-2586
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVOESA-2025-2646 3.6

openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and sophisticated configuration options.

Security Fix(es):

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)(CVE-2025-61984)

ssh in OpenSSH before 10.1 allows the 0 character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.(CVE-2025-61985)

Record
OESA-2025-2646
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2025:23479 5.3

Red Hat Security Advisory: openssh security update

Record
RHSA-2025:23479
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:23480 5.3

Red Hat Security Advisory: openssh security update

Record
RHSA-2025:23480
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2025:23481 5.3

Red Hat Security Advisory: openssh security update

Record
RHSA-2025:23481
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:0693 5.3

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:0693
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:0976 5.3

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:0976
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:1678 5.3

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:1678
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:1790 6.5

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:1790
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVRHSA-2026:1815 5.3

Red Hat Security Advisory: openssh security update

Record
RHSA-2026:1815
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:5475 8.2

Red Hat Security Advisory: Red Hat Hardened Images RPM Release

Record
RHSA-2026:5475
CVSS 3.1
8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2025:23479 5.3

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)

  • openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:23479
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRLSA-2025:23480 5.3

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)

  • openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:23480
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVRLSA-2025:23481 5.3

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)

  • openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2025:23481
CVSS 3.1
5.3 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2025-61984 3.6

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
UBUNTU-CVE-2025-61984
CVSS 3.1
3.6 LowCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
OSVALSA-2025:23479 No score

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)
  • openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:23479
Updated
2026-11-02
OSVALSA-2025:23480 No score

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)
  • openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:23480
Updated
2026-11-02
OSVALSA-2025:23481 No score

Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

  • openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)
  • openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2025:23481
Updated
2026-11-02
OSVAZL-68231 No score

CVE-2025-61984 affecting package openssh for versions less than 9.8p1-5

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Record
AZL-68231
Updated
2026-11-05
OSVCLSA-2026-1767954480 No score

openssh: Fix of 2 CVEs

  • CVE-2025-61984: fix username handling by rejecting control characters from untrusted sources to prevent ProxyCommand code execution
  • CVE-2025-61985: disallowed NUL characters in ssh:// URI parsing to prevent ProxyCommand-based code execution
Record
CLSA-2026-1767954480
Updated
2026-11-02
OSVCLSA-2026-1767955216 No score

openssh: Fix of 2 CVEs

  • CVE-2025-61984: fix username handling by rejecting control characters from untrusted sources to prevent ProxyCommand code execution
  • CVE-2025-61985: disallowed NUL characters in ssh:// URI parsing to prevent ProxyCommand-based code execution
Record
CLSA-2026-1767955216
Updated
2026-11-02
OSVMGASA-2026-0059 No score

Updated openssh packages fix security vulnerabilities

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (CVE-2025-61984) ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used. (CVE-2025-61985)

Record
MGASA-2026-0059
Updated
2026-11-02
OSVopenSUSE-SU-2025:20122-1 No score

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198).
  • CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199).
Record
openSUSE-SU-2025:20122-1
Updated
2026-11-02
OSVROOT-OS-DEBIAN-12-CVE-2025-61984 No score

CVE-2025-61984 in rootio-openssh - Patched by Root

Root has patched CVE-2025-61984 in the rootio-openssh package for Root:Debian:12. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-12-CVE-2025-61984
Updated
2026-11-02
OSVROOT-OS-DEBIAN-13-CVE-2025-61984 No score

CVE-2025-61984 in rootio-openssh - Patched by Root

Root has patched CVE-2025-61984 in the rootio-openssh package for Root:Debian:13. Multiple fixed versions available.

Record
ROOT-OS-DEBIAN-13-CVE-2025-61984
Updated
2026-11-02
OSVSUSE-SU-2025:21044-1 No score

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198).
  • CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199).
Record
SUSE-SU-2025:21044-1
Updated
2026-11-02
OSVSUSE-SU-2025:21128-1 No score

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198).
  • CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199).
Record
SUSE-SU-2025:21128-1
Updated
2026-11-02
OSVSUSE-SU-2025:21161-1 No score

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198).
  • CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199).
Record
SUSE-SU-2025:21161-1
Updated
2026-11-02
OSVSUSE-SU-2025:4067-1 No score

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198)
  • CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199)
Record
SUSE-SU-2025:4067-1
Updated
2026-11-02
OSVSUSE-SU-2025:4097-1 No score

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198)
Record
SUSE-SU-2025:4097-1
Updated
2026-11-02
OSVSUSE-SU-2025:4098-1 No score

Security update for openssh8.4

This update for openssh8.4 fixes the following issues:

  • CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198)
  • CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199)
Record
SUSE-SU-2025:4098-1
Updated
2026-11-02
OSVSUSE-SU-2025:4112-1 No score

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198)
  • CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199)
Record
SUSE-SU-2025:4112-1
Updated
2026-11-02
OSVSUSE-SU-2026:20662-1 No score

Security update for openssh

This update for openssh fixes the following issues:

  • CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198).
  • CVE-2025-61985: code execution via '\0' character in ssh: // URI when a ProxyCommand is used (bsc#1251199).
Record
SUSE-SU-2026:20662-1
Updated
2026-11-02
OSVUSN-8090-1 No score

openssh vulnerabilities

Jeremy Brown discovered that the OpenSSH GSSAPI Key Exchange incorrectly handled disconnecting clients. In non-default configurations where the GSSAPIKeyExchange setting is enabled, a remote attacker could use this issue to cause OpenSSH to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-3497)

David Leadbeater discovered that OpenSSH incorrectly handled certain control characters in usernames. When untrusted usernames and the ProxyCommand are being used, an attacker could possibly use this issue to execute arbitrary code. (CVE-2025-61984)

David Leadbeater discovered that OpenSSH incorrectly handled NULL characters in ssh:// URIs. When the ProxyCommand is being used, an attacker could possibly use this issue to execute arbitrary code. (CVE-2025-61985)

Record
USN-8090-1
Updated
2026-11-02
OSVUSN-8090-2 No score

openssh vulnerabilities

USN-8090-1 fixed vulnerabilities in OpenSSH. This update provides the corresponding updates for Ubuntu 20.04 LTS.

Original advisory details:

Jeremy Brown discovered that the OpenSSH GSSAPI Key Exchange incorrectly handled disconnecting clients. In non-default configurations where the GSSAPIKeyExchange setting is enabled, a remote attacker could use this issue to cause OpenSSH to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2026-3497)

David Leadbeater discovered that OpenSSH incorrectly handled certain control characters in usernames. When untrusted usernames and the ProxyCommand are being used, an attacker could possibly use this issue to execute arbitrary code. (CVE-2025-61984)

David Leadbeater discovered that OpenSSH incorrectly handled NULL characters in ssh:// URIs. When the ProxyCommand is being used, an attacker could possibly use this issue to execute arbitrary code. (CVE-2025-61985)

Record
USN-8090-2
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssh
Alpine:v3.22
 before 10.0_p1-r10
10.0_p1-r10
openssh
Alpine:v3.23
 before 10.1_p1-r0
10.1_p1-r0
openssh
Alpine:v3.24
 before 10.1_p1-r0
10.1_p1-r0
openssh
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.9p1-12.el10_1.alma.1
9.9p1-12.el10_1.alma.1
openssh-askpass
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.9p1-12.el10_1.alma.1
9.9p1-12.el10_1.alma.1
openssh-clients
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.9p1-12.el10_1.alma.1
9.9p1-12.el10_1.alma.1
openssh-keycat
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.9p1-12.el10_1.alma.1
9.9p1-12.el10_1.alma.1
openssh-keysign
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.9p1-12.el10_1.alma.1
9.9p1-12.el10_1.alma.1
openssh-server
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.9p1-12.el10_1.alma.1
9.9p1-12.el10_1.alma.1
openssh
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.7p1-47.el9_7.alma.1
8.7p1-47.el9_7.alma.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
openssh-askpass
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.7p1-47.el9_7.alma.1
8.7p1-47.el9_7.alma.1
openssh-clients
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.7p1-47.el9_7.alma.1
8.7p1-47.el9_7.alma.1
openssh-keycat
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.7p1-47.el9_7.alma.1
8.7p1-47.el9_7.alma.1
openssh-server
AlmaLinux:9
From an advisory covering 2 CVEs
 before 8.7p1-47.el9_7.alma.1
8.7p1-47.el9_7.alma.1
pam_ssh_agent_auth
AlmaLinux:9
From an advisory covering 2 CVEs
 before 0.10.4-5.47.el9_7.alma.1
0.10.4-5.47.el9_7.alma.1
openssh
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-27.el8_10
8.0p1-27.el8_10
openssh-askpass
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-27.el8_10
8.0p1-27.el8_10
openssh-cavs
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-27.el8_10
8.0p1-27.el8_10
openssh-clients
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-27.el8_10
8.0p1-27.el8_10
openssh-keycat
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-27.el8_10
8.0p1-27.el8_10
openssh-ldap
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-27.el8_10
8.0p1-27.el8_10
openssh-server
AlmaLinux:8
From an advisory covering 2 CVEs
 before 8.0p1-27.el8_10
8.0p1-27.el8_10
pam_ssh_agent_auth
AlmaLinux:8
From an advisory covering 2 CVEs
 before 0.10.3-7.27.el8_10
0.10.3-7.27.el8_10
openssh
Azure Linux:3
 before 9.8p1-5
9.8p1-5
openssh
Alpaquita:23
 9.1_p1-r3 up to 9.1_p1-r12
9.1_p1-r12
openssh
Alpaquita:25
 10.0_p1-r7 up to 10.0_p1-r10
10.0_p1-r10
openssh
Alpaquita:stream
 9.3_p1-r7 up to 10.1_p1-r0
10.1_p1-r0
openssh
BellSoft Hardened Containers:23
 9.1_p1-r3 up to 9.1_p1-r12
9.1_p1-r12
openssh
BellSoft Hardened Containers:25
 10.0_p1-r7 up to 10.0_p1-r10
10.0_p1-r10
openssh
BellSoft Hardened Containers:stream
 9.3_p1-r7 up to 10.1_p1-r0
10.1_p1-r0
openssh
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 8.7p1-30.el9_2.tuxcare.els9
8.7p1-30.el9_2.tuxcare.els9
openssh-askpass
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 8.7p1-30.el9_2.tuxcare.els9
8.7p1-30.el9_2.tuxcare.els9
openssh-clients
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 8.7p1-30.el9_2.tuxcare.els9
8.7p1-30.el9_2.tuxcare.els9
openssh-keycat
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 8.7p1-30.el9_2.tuxcare.els9
8.7p1-30.el9_2.tuxcare.els9
openssh-server
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 8.7p1-30.el9_2.tuxcare.els9
8.7p1-30.el9_2.tuxcare.els9
openssh-sk-dummy
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 8.7p1-30.el9_2.tuxcare.els9
8.7p1-30.el9_2.tuxcare.els9
pam_ssh_agent_auth
TuxCare:AlmaLinux:9.2
From an advisory covering 2 CVEs
 before 0.10.4-5.30.el9_2.tuxcare.els9
0.10.4-5.30.el9_2.tuxcare.els9
openssh
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 8.7p1-45.el9.tuxcare.els1
8.7p1-45.el9.tuxcare.els1
openssh-askpass
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 8.7p1-45.el9.tuxcare.els1
8.7p1-45.el9.tuxcare.els1
openssh-clients
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 8.7p1-45.el9.tuxcare.els1
8.7p1-45.el9.tuxcare.els1
openssh-keycat
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 8.7p1-45.el9.tuxcare.els1
8.7p1-45.el9.tuxcare.els1
openssh-server
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 8.7p1-45.el9.tuxcare.els1
8.7p1-45.el9.tuxcare.els1
openssh-sk-dummy
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 8.7p1-45.el9.tuxcare.els1
8.7p1-45.el9.tuxcare.els1
pam_ssh_agent_auth
TuxCare:AlmaLinux:9.6
From an advisory covering 2 CVEs
 before 0.10.4-5.45.el9.tuxcare.els1
0.10.4-5.45.el9.tuxcare.els1
openssh
Debian:12
 before 1:9.2p1-2+deb12u8, plus listed versions
1:9.2p1-21:9.2p1-2+deb12u11:9.2p1-2+deb12u21:9.2p1-2+deb12u31:9.2p1-2+deb12u41:9.2p1-2+deb12u51:9.2p1-2+deb12u61:9.2p1-2+deb12u7
1:9.2p1-2+deb12u8
openssh
Debian:13
 before 1:10.0p1-7+deb13u1, plus listed versions
1:10.0p1-7
1:10.0p1-7+deb13u1
openssh
Debian:14
 before 1:10.1p1-1, plus listed versions
1:10.0p1-71:10.0p1-8
1:10.1p1-1
OpenSSH_jll
Julia
 before 10.1.1+0
10.1.1+0
openssh
Mageia:9
From an advisory covering 2 CVEs
 before 9.3p1-2.6.mga9
9.3p1-2.6.mga9
openssh
openEuler:20.03-LTS-SP4
From an advisory covering 2 CVEs
 before 8.2p1-33.oe2003sp4
8.2p1-33.oe2003sp4
openssh
openEuler:22.03-LTS-SP3
From an advisory covering 2 CVEs
 before 8.8p1-37.oe2203sp3
8.8p1-37.oe2203sp3
openssh
openEuler:22.03-LTS-SP4
From an advisory covering 2 CVEs
 before 8.8p1-37.oe2203sp4
8.8p1-37.oe2203sp4
openssh
openEuler:24.03-LTS-SP1
From an advisory covering 2 CVEs
 before 9.6p1-9.oe2403sp1
9.6p1-9.oe2403sp1
openssh
openEuler:24.03-LTS-SP2
From an advisory covering 2 CVEs
 before 9.6p1-9.oe2403sp2
9.6p1-9.oe2403sp2
openssh
openEuler:24.03-LTS
From an advisory covering 2 CVEs
 before 9.3p2-9.oe2403
9.3p2-9.oe2403
openssh-askpass
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-askpass-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-clients-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-debugsource
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-keycat-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-keysign
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-keysign-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-server-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-clients
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-keycat
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-server
Red Hat:enterprise_linux:10.1
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1
0:9.9p1-12.el10_1
openssh-askpass
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-askpass-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-clients-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-keycat-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
pam_ssh_agent_auth
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:0.10.4-5.47.el9_7
0:0.10.4-5.47.el9_7
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 2 CVEs
 before 0:0.10.4-5.47.el9_7
0:0.10.4-5.47.el9_7
openssh
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-askpass-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-clients
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-clients-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-debugsource
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-keycat
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-keycat-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-server
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-server-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7
0:8.7p1-47.el9_7
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:9::baseos
From an advisory covering 2 CVEs
 before 0:0.10.4-5.47.el9_7
0:0.10.4-5.47.el9_7
openssh-askpass
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-askpass-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-cavs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-clients-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-keycat-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-ldap-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-server-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:0.10.3-7.27.el8_10
0:0.10.3-7.27.el8_10
openssh
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-askpass-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-cavs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-cavs-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-clients
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-clients-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-debugsource
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-keycat
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-keycat-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-ldap
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-ldap-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-server
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh-server-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
pam_ssh_agent_auth
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:0.10.3-7.27.el8_10
0:0.10.3-7.27.el8_10
pam_ssh_agent_auth-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:0.10.3-7.27.el8_10
0:0.10.3-7.27.el8_10
openssh-askpass
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-askpass-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-clients-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-debugsource
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-keycat-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-server-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-sk-dummy-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
pam_ssh_agent_auth
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:0.10.4-5.45.el9_6
0:0.10.4-5.45.el9_6
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_eus:9.6::appstream
From an advisory covering 2 CVEs
 before 0:0.10.4-5.45.el9_6
0:0.10.4-5.45.el9_6
openssh
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-askpass-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-clients
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-clients-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-debugsource
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-keycat
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-keycat-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-server
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-server-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
openssh-sk-dummy-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-45.el9_6.1
0:8.7p1-45.el9_6.1
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_eus:9.6::baseos
From an advisory covering 2 CVEs
 before 0:0.10.4-5.45.el9_6
0:0.10.4-5.45.el9_6
openssh-askpass
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-askpass-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-clients-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-debugsource
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-keycat-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-server-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-sk-dummy-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
pam_ssh_agent_auth
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:0.10.4-5.38.el9_4.6
0:0.10.4-5.38.el9_4.6
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_eus:9.4::appstream
From an advisory covering 2 CVEs
 before 0:0.10.4-5.38.el9_4.6
0:0.10.4-5.38.el9_4.6
openssh
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-askpass-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-clients
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-clients-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-debugsource
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-keycat
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-keycat-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-server
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-server-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
openssh-sk-dummy-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-38.el9_4.6
0:8.7p1-38.el9_4.6
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_eus:9.4::baseos
From an advisory covering 2 CVEs
 before 0:0.10.4-5.38.el9_4.6
0:0.10.4-5.38.el9_4.6
openssh-askpass
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-askpass-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-clients-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-debugsource
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-keycat-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-keysign
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-keysign-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-server-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-sk-dummy-debuginfo
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-clients
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-keycat
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-server
Red Hat:enterprise_linux_eus:10.0
From an advisory covering 2 CVEs
 before 0:9.9p1-7.el10_0.1
0:9.9p1-7.el10_0.1
openssh-askpass
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-askpass-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-clients-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-debugsource
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-keycat-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-server-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
pam_ssh_agent_auth
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:0.10.4-4.13.el9_0.4
0:0.10.4-4.13.el9_0.4
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_e4s:9.0::appstream
From an advisory covering 3 CVEs
 before 0:0.10.4-4.13.el9_0.4
0:0.10.4-4.13.el9_0.4
openssh
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-askpass-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-clients
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-clients-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-debugsource
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-keycat
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-keycat-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-server
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
openssh-server-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:8.7p1-13.el9_0.1
0:8.7p1-13.el9_0.1
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_e4s:9.0::baseos
From an advisory covering 3 CVEs
 before 0:0.10.4-4.13.el9_0.4
0:0.10.4-4.13.el9_0.4
openssh-askpass
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-askpass-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-clients-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-debugsource
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-keycat-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-server-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-sk-dummy-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
pam_ssh_agent_auth
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:0.10.4-5.30.el9_2.9
0:0.10.4-5.30.el9_2.9
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_e4s:9.2::appstream
From an advisory covering 2 CVEs
 before 0:0.10.4-5.30.el9_2.9
0:0.10.4-5.30.el9_2.9
openssh
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-askpass-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-clients
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-clients-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-debugsource
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-keycat
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-keycat-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-server
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-server-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
openssh-sk-dummy-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:8.7p1-30.el9_2.9
0:8.7p1-30.el9_2.9
pam_ssh_agent_auth-debuginfo
Red Hat:rhel_e4s:9.2::baseos
From an advisory covering 2 CVEs
 before 0:0.10.4-5.30.el9_2.9
0:0.10.4-5.30.el9_2.9
openssh
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.2p1-9.hum1
0:10.2p1-9.hum1
openssh-askpass
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.2p1-9.hum1
0:10.2p1-9.hum1
openssh-clients
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.2p1-9.hum1
0:10.2p1-9.hum1
openssh-keycat
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.2p1-9.hum1
0:10.2p1-9.hum1
openssh-keysign
Red Hat:hummingbird:1
From an advisory covering 3 CVEs
 before 0:10.2p1-9.hum1
0:10.2p1-9.hum1
openssh
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:9.9p1-12.el10_1.rocky.0.1
0:9.9p1-12.el10_1.rocky.0.1
openssh
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:8.7p1-47.el9_7.rocky.0.1
0:8.7p1-47.el9_7.rocky.0.1
openssh
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:8.0p1-27.el8_10
0:8.0p1-27.el8_10
openssh
SUSE:Linux Micro 6.0
From an advisory covering 2 CVEs
 before 9.6p1-4.1
9.6p1-4.1
openssh
SUSE:Linux Micro 6.2
From an advisory covering 2 CVEs
 before 10.0p2-160000.3.1
10.0p2-160000.3.1
openssh
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 10.0p2-160000.3.1
10.0p2-160000.3.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 16.0
From an advisory covering 2 CVEs
 before 10.0p2-160000.3.1
10.0p2-160000.3.1
openssh
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 10.0p2-160000.3.1
10.0p2-160000.3.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server for SAP applications 16.0
From an advisory covering 2 CVEs
 before 10.0p2-160000.3.1
10.0p2-160000.3.1
openssh
SUSE:Linux Enterprise Module for Basesystem 15 SP6
From an advisory covering 2 CVEs
 before 9.6p1-150600.6.34.1
9.6p1-150600.6.34.1
openssh
SUSE:Linux Enterprise Module for Basesystem 15 SP7
From an advisory covering 2 CVEs
 before 9.6p1-150600.6.34.1
9.6p1-150600.6.34.1
openssh-askpass-gnome
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
From an advisory covering 2 CVEs
 before 9.6p1-150600.6.34.1
9.6p1-150600.6.34.1
openssh-askpass-gnome
SUSE:Linux Enterprise Module for Desktop Applications 15 SP7
From an advisory covering 2 CVEs
 before 9.6p1-150600.6.34.1
9.6p1-150600.6.34.1
openssh
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 9.6p1-150600.6.34.1
9.6p1-150600.6.34.1
openssh-askpass-gnome
openSUSE:Leap 15.6
From an advisory covering 2 CVEs
 before 9.6p1-150600.6.34.1
9.6p1-150600.6.34.1
openssh
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 7.2p2-81.34.1
7.2p2-81.34.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 12 SP5-LTSS
 before 7.2p2-81.34.1
7.2p2-81.34.1
openssh
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 7.2p2-81.34.1
7.2p2-81.34.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
 before 7.2p2-81.34.1
7.2p2-81.34.1
openssh8.4
SUSE:Linux Enterprise Server 12 SP5-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-8.19.1
8.4p1-8.19.1
openssh8.4
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
From an advisory covering 2 CVEs
 before 8.4p1-8.19.1
8.4p1-8.19.1
openssh
SUSE:Linux Enterprise Micro 5.3
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Micro 5.4
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Micro 5.5
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 15 SP4-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server 15 SP5-LTSS
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Linux Enterprise Server for SAP Applications 15 SP5
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Manager Proxy LTS 4.3
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Manager Server LTS 4.3
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Enterprise Micro 5.2
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh-askpass-gnome
SUSE:Enterprise Storage 7.1
From an advisory covering 2 CVEs
 before 8.4p1-150300.3.57.1
8.4p1-150300.3.57.1
openssh
SUSE:Linux Micro 6.1
From an advisory covering 2 CVEs
 before 9.6p1-slfo.1.1_3.1
9.6p1-slfo.1.1_3.1
openssh
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1:6.2p2-61:6.2p2-6ubuntu11:6.4p1-11:6.4p1-21:6.5p1-1
Show 22 moreShow less
1:6.5p1-21:6.5p1-31:6.5p1-41:6.5p1-61:6.6p1-11:6.6p1-21:6.6p1-2ubuntu11:6.6p1-2ubuntu21:6.6p1-2ubuntu2.21:6.6p1-2ubuntu2.31:6.6p1-2ubuntu2.41:6.6p1-2ubuntu2.61:6.6p1-2ubuntu2.71:6.6p1-2ubuntu2.81:6.6p1-2ubuntu2.101:6.6p1-2ubuntu2.111:6.6p1-2ubuntu2.121:6.6p1-2ubuntu2.131:6.6p1-2ubuntu2.13+esm11:6.6p1-2ubuntu2.13+esm21:6.6p1-2ubuntu2.13+esm31:6.6p1-2ubuntu2.13+esm4
 None known
openssh
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1:6.9p1-21:6.9p1-31:7.1p1-11:7.1p1-31:7.1p1-4
Show 27 moreShow less
1:7.1p1-61:7.1p2-11:7.1p2-21:7.2p1-11:7.2p2-11:7.2p2-21:7.2p2-31:7.2p2-41:7.2p2-4ubuntu11:7.2p2-4ubuntu2.11:7.2p2-4ubuntu2.21:7.2p2-4ubuntu2.41:7.2p2-4ubuntu2.51:7.2p2-4ubuntu2.61:7.2p2-4ubuntu2.71:7.2p2-4ubuntu2.81:7.2p2-4ubuntu2.101:7.2p2-4ubuntu2.10+esm11:7.2p2-4ubuntu2.10+esm21:7.2p2-4ubuntu2.10+esm31:7.2p2-4ubuntu2.10+esm41:7.2p2-4ubuntu2.10+esm51:7.2p2-4ubuntu2.10+esm61:7.2p2-4ubuntu2.10+esm71:7.2p2-4ubuntu2.10+esm81:7.2p2-4ubuntu2.10+esm91:7.2p2-4ubuntu2.10+esm10
 None known
openssh
Ubuntu:Pro:FIPS-updates:16.04:LTS
 All versions, plus listed versions
1:7.2p2-4ubuntu2.fips.2.2.31:7.2p2-4ubuntu2.fips.2.4.11:7.2p2-4ubuntu2.fips.2.4.21:7.2p2-4ubuntu2.fips.2.8.11:7.2p2-4ubuntu2.fips.2.10.1
Show 6 moreShow less
1:7.2p2-4ubuntu2.fips.2.10.21:7.2p2-4ubuntu2.fips.2.10.31:7.2p2-4ubuntu2.fips.2.10.41:7.2p2-4ubuntu2.fips.2.10.51:7.2p2-4ubuntu2.fips.2.10.61:7.2p2-4ubuntu2.fips.2.10.7
 None known
openssh
Ubuntu:Pro:FIPS:16.04:LTS
 All versions, plus listed versions
1:7.2p2-4ubuntu2.fips.2.21:7.2p2-4ubuntu2.fips.2.2.11:7.2p2-4ubuntu2.fips.2.10.1
 None known
openssh
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:7.5p1-101:7.6p1-41:7.6p1-4ubuntu0.11:7.6p1-4ubuntu0.21:7.6p1-4ubuntu0.3
Show 9 moreShow less
1:7.6p1-4ubuntu0.51:7.6p1-4ubuntu0.61:7.6p1-4ubuntu0.71:7.6p1-4ubuntu0.7+esm11:7.6p1-4ubuntu0.7+esm21:7.6p1-4ubuntu0.7+esm31:7.6p1-4ubuntu0.7+esm41:7.6p1-4ubuntu0.7+esm51:7.6p1-4ubuntu0.7+esm6
 None known
openssh-ssh1
Ubuntu:18.04:LTS
 All versions, plus listed versions
1:7.5p1-81:7.5p1-91:7.5p1-9build11:7.5p1-10
 None known
openssh
Ubuntu:Pro:FIPS-updates:18.04:LTS
 All versions, plus listed versions
1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.21:7.9p1-10~ubuntu18.04.fips.0.31:7.9p1-10~ubuntu18.04.fips.0.41:7.9p1-10~ubuntu18.04.fips.0.5
Show 5 moreShow less
1:7.9p1-10~ubuntu18.04.fips.0.61:7.9p1-10~ubuntu18.04.fips.0.71:7.9p1-10~ubuntu18.04.fips.0.81:7.9p1-10~ubuntu18.04.fips.0.91:7.9p1-10~ubuntu18.04.fips.0.10
 None known
openssh
Ubuntu:Pro:FIPS:18.04:LTS
 All versions, plus listed versions
1:7.9p1-10~ubuntu18.04.fips.0.11:7.9p1-10~ubuntu18.04.fips.0.2
 None known
openssh
Ubuntu:Pro:20.04:LTS
 before 1:8.2p1-4ubuntu0.13+esm1, plus listed versions
1:8.0p1-6build11:8.1p1-11:8.1p1-51:8.2p1-41:8.2p1-4ubuntu0.1
Show 11 moreShow less
1:8.2p1-4ubuntu0.21:8.2p1-4ubuntu0.31:8.2p1-4ubuntu0.41:8.2p1-4ubuntu0.51:8.2p1-4ubuntu0.71:8.2p1-4ubuntu0.81:8.2p1-4ubuntu0.91:8.2p1-4ubuntu0.101:8.2p1-4ubuntu0.111:8.2p1-4ubuntu0.121:8.2p1-4ubuntu0.13
1:8.2p1-4ubuntu0.13+esm1
openssh-ssh1
Ubuntu:20.04:LTS
 All versions, plus listed versions
1:7.5p1-11build1
 None known
openssh
Ubuntu:Pro:FIPS-updates:20.04:LTS
 before 1:8.2p1-4ubuntu0.fips.0.13.1, plus listed versions
1:8.2p1-4ubuntu0.fips.0.2.11:8.2p1-4ubuntu0.fips.0.4.01:8.2p1-4ubuntu0.fips.0.5.01:8.2p1-4ubuntu0.fips.0.71:8.2p1-4ubuntu0.fips.0.8
Show 5 moreShow less
1:8.2p1-4ubuntu0.fips.0.91:8.2p1-4ubuntu0.fips.0.101:8.2p1-4ubuntu0.fips.0.111:8.2p1-4ubuntu0.fips.0.121:8.2p1-4ubuntu0.fips.0.13
1:8.2p1-4ubuntu0.fips.0.13.1
openssh
Ubuntu:Pro:FIPS:20.04:LTS
 All versions, plus listed versions
1:8.2p1-4ubuntu0.fips.0.2.1
 None known
openssh
Ubuntu:22.04:LTS
 before 1:8.9p1-3ubuntu0.14, plus listed versions
1:8.4p1-6ubuntu21:8.7p1-21:8.7p1-2build11:8.7p1-41:8.8p1-1
Show 10 moreShow less
1:8.9p1-31:8.9p1-3ubuntu0.11:8.9p1-3ubuntu0.31:8.9p1-3ubuntu0.41:8.9p1-3ubuntu0.51:8.9p1-3ubuntu0.61:8.9p1-3ubuntu0.71:8.9p1-3ubuntu0.101:8.9p1-3ubuntu0.111:8.9p1-3ubuntu0.13
1:8.9p1-3ubuntu0.14
openssh-ssh1
Ubuntu:22.04:LTS
 All versions, plus listed versions
1:7.5p1-121:7.5p1-12build11:7.5p1-13
 None known
openssh
Ubuntu:Pro:FIPS-preview:22.04:LTS
 All versions, plus listed versions
1:8.9p1-3ubuntu0.4+Fips11:8.9p1-3ubuntu0.4+Fips31:8.9p1-3ubuntu1.fips.0~ppa3
 None known
openssh
Ubuntu:Pro:FIPS-updates:22.04:LTS
 before 1:8.9p1-3ubuntu0.14+Fips1, plus listed versions
1:8.9p1-3ubuntu0.4+Fips11:8.9p1-3ubuntu0.4+Fips31:8.9p1-3ubuntu0.6+Fips11:8.9p1-3ubuntu0.7+Fips11:8.9p1-3ubuntu0.10+Fips11:8.9p1-3ubuntu0.11+Fips11:8.9p1-3ubuntu0.13+Fips1
1:8.9p1-3ubuntu0.14+Fips1
openssh
Ubuntu:24.04:LTS
 before 1:9.6p1-3ubuntu13.15, plus listed versions
1:9.3p1-1ubuntu31:9.4p1-1ubuntu11:9.6p1-3ubuntu11:9.6p1-3ubuntu21:9.6p1-3ubuntu11
Show 12 moreShow less
1:9.6p1-3ubuntu121:9.6p1-3ubuntu131:9.6p1-3ubuntu13.31:9.6p1-3ubuntu13.41:9.6p1-3ubuntu13.51:9.6p1-3ubuntu13.71:9.6p1-3ubuntu13.81:9.6p1-3ubuntu13.91:9.6p1-3ubuntu13.111:9.6p1-3ubuntu13.121:9.6p1-3ubuntu13.131:9.6p1-3ubuntu13.14
1:9.6p1-3ubuntu13.15
openssh-ssh1
Ubuntu:24.04:LTS
 All versions, plus listed versions
1:7.5p1-141:7.5p1-151:7.5p1-15build11:7.5p1-16
 None known
openssh
Ubuntu:Pro:FIPS-updates:24.04:LTS
 before 1:9.6p1-3ubuntu13.15+Fips1, plus listed versions
1:9.6p1-3ubuntu13.7+Fips11:9.6p1-3ubuntu13.12+Fips11:9.6p1-3ubuntu13.13+Fips11:9.6p1-3ubuntu13.14+Fips1
1:9.6p1-3ubuntu13.15+Fips1
openssh
Ubuntu:25.10
 before 1:10.0p1-5ubuntu5.1, plus listed versions
1:9.9p1-3ubuntu31:9.9p1-3ubuntu3.11:10.0p1-5ubuntu21:10.0p1-5ubuntu31:10.0p1-5ubuntu41:10.0p1-5ubuntu5
1:10.0p1-5ubuntu5.1
openssh-ssh1
Ubuntu:25.10
 All versions, plus listed versions
1:7.5p1-17
 None known
openssh-ssh1
Ubuntu:26.10
 All versions, plus listed versions
1:7.5p1-181:7.5p1-18ubuntu11:7.5p1-18ubuntu2
 None known
openssh
Ubuntu:26.04:LTS
 before 1:10.2p1-2ubuntu1, plus listed versions
1:10.0p1-5ubuntu5
1:10.2p1-2ubuntu1
openssh-ssh1
Ubuntu:26.04:LTS
 All versions, plus listed versions
1:7.5p1-171:7.5p1-18
 None known
openssh
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 10.0p2-160000.3.1
10.0p2-160000.3.1
openssh-askpass-gnome
openSUSE:Leap 16.0
From an advisory covering 2 CVEs
 before 10.0p2-160000.3.1
10.0p2-160000.3.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubdgl/cve-2025-61984-poc2025-10-07
PoC in GitHubflyskyfire/cve-2025-61984-poc2025-10-24

History

History
RecordedChangedSources
affected
factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-61984 is a low vulnerability (CVSS 3.6) in Openbsd Openssh, published October 6, 2025. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.46%, the 40th percentile. Fixed in openssh 10.0_p1-r10.

References

Show 80 moreShow less
This page doesn't list everything

Left out here: 2 package rows. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open