Orta CVSS 6.5 PoC var

CVE-2026-55653: Openssh: güvenlik açığı

Yayın: 23 Haziran 2026 07:17 · Güncelleme: 6 Kasım 2026 10:30

Açıklama (NVD)

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Özet bilgiler

Ürün: Openbsd Openssh
CVSS v3.1: 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS: %0,53 (yüzdelik 45)
CWE: CWE-415
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
openbsd-openssh	—	—	—
redhat-hardened-images	—	—	—
redhat-openshift-container-platform	4.0	4.0	—
redhat-enterprise-linux	6.0	6.0	—
redhat-enterprise-linux	7.0	7.0	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—
redhat-enterprise-linux	10.0	10.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları