{"id":"CVE-2026-110927","aliases":["EUVD-2026-102055","GHSA-hq2f-vwrj-48j9","RHSA-2026:82247","UBUNTU-CVE-2026-110927"],"status":"rejected","title":"A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand...","description":"CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-770"],"published":"2026-10-14T10:32:42Z","modified":"2026-10-28T20:17:41Z","affected":[{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-askpass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-keycat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-keysign","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Red Hat:hummingbird:1","package":"openssh-sk-dummy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.5p1-1.2.hum1"}]}],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-8","1:7.5p1-9","1:7.5p1-9build1","1:7.5p1-10"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-11build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-12","1:7.5p1-12build1","1:7.5p1-13"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-14","1:7.5p1-15","1:7.5p1-15build1","1:7.5p1-16"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-18","1:7.5p1-18ubuntu1","1:7.5p1-18ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"openssh-ssh1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17","1:7.5p1-18"]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110927","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553037","tags":["report"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82247","tags":["advisory","report"]},{"url":"https://github.com/advisories/GHSA-hq2f-vwrj-48j9"},{"url":"https://images.redhat.com/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106586","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106583","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106587","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106552","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106582","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106584","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106585","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110925","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110926","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-110923","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82247.json","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547187","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106552","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106552","tags":["advisory"]},{"url":"https://www.openssh.org/releasenotes.html#10.6","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547181","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106582","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106582","tags":["advisory"]},{"url":"https://arxiv.org/abs/2609.07709","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547243","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106583","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106583","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106584","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106585","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106585","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106586","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106586","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547207","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106587","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106587","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553028","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110923","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553034","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110925","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553035","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110926","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-110927","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2026-110927","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-110927","description":"CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.","status":"rejected","published":"2026-10-15T13:07:57.789Z","modified":"2026-10-21T06:48:13.674Z","updated_at":"2026-11-02T13:34:26.24368Z"}],"euvd":[{"id":"EUVD-2026-102055","description":"CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.","status":"published","published":"2026-10-15T13:07:57Z","modified":"2026-10-21T06:48:13Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:59:40.152045Z"}],"ghsa":[{"id":"GHSA-hq2f-vwrj-48j9","title":"A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand...","description":"A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.","status":"published","published":"2026-10-15T18:32:34Z","modified":"2026-10-15T21:36:00Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-770"],"updated_at":"2026-11-02T15:13:49.297576Z"}],"nvd":[{"id":"CVE-2026-110927","description":"Rejected reason: CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.","status":"rejected","published":"2026-10-15T14:17:22.76Z","modified":"2026-10-21T07:17:17.647Z","updated_at":"2026-11-02T14:12:59.328869Z"}],"osv":[{"id":"RHSA-2026:82247","title":"Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update","status":"published","published":"2026-10-14T10:32:42Z","modified":"2026-10-20T10:43:33.437440456Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:23.547034Z"},{"id":"UBUNTU-CVE-2026-110927","description":"Rejected reason: CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.","status":"published","published":"2026-10-15T14:17:00Z","modified":"2026-10-28T20:17:41.856539221Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T16:55:59.591851Z"}]}}