4.8
Medium
CVE-2026-73282 In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding…
Description
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| OpenSSH 10.5 | earliest → < 10.5 | 10.5 |
References
- www.openssh.org www.openssh.org
Timeline
- Published
- Last modified
Other CVEs of OpenSSH
The 33 CVEs of OpenSSH →
CVE-2026-123158
sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password…
8.1
High
CVE-2026-106583
In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection
2.5
Low
CVE-2026-106589
In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd-session can…
2.9
Low
CVE-2026-106588
In sshd in OpenSSH through 10.6, use of the macOS 27 (or later) SDK has the side effect of loss of sandboxing, which…
3.1
Low