CVE-2026-55654

Katalog CVE

CVSS 3.7 · Low EPSS 0,65%

Kerentanan Out-of-bounds Read pada openbsd openssh, redhat hardened images +1 lainnya. Skor CVSS 3.1 3.7 (Low) menurut redhat.com.

Deskripsi (NVD)

A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.

Rincian

Terbit di NVD

23 Juni 2026

Terakhir diubah

24 September 2026

Status NVD

Modified

CVSS 3.1

3.7 (Low), sumber redhat.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,65% peluang dieksploitasi; lebih tinggi dari 49,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-55654 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2462493 exploit · issue tracking · advisory vendor
• https://access.redhat.com/errata/RHSA-2026:36759
• https://access.redhat.com/errata/RHSA-2026:47756
• https://access.redhat.com/errata/RHSA-2026:47757
• https://access.redhat.com/errata/RHSA-2026:54387
• https://access.redhat.com/errata/RHSA-2026:58981