Beveiligingsadvies

CVE-2026-55653

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-23 03:36:22

Laatst bijgewerkt 2026-09-01 12:38:16

Toegewezen door redhat

CVSS-score 4.3

Status PUBLISHED

Beschrijving

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

← Alle CVE's bekijken Bekijk op cve.org ↗