OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.
CVSS Details
- CVSS 3.1 Base Score: 2.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade opensshUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-cavsUpgrade openssh-serverUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-ldap | May 5, 2026 | May 4, 2026 |
| Amazon Linux Ami 2 | — | Upgrade openssh-clientsUpgrade openssh-debuginfoUpgrade opensshUpgrade openssh-server-sysvinitUpgrade openssh-cavsUpgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-ldapUpgrade openssh-keycatUpgrade pam_ssh_agent_auth | Jun 8, 2026 | Jun 8, 2026 |
| Amazon_linux_2023 | — | Upgrade openssh-clientsUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-debuginfoUpgrade opensshUpgrade openssh-clients-debuginfoUpgrade openssh-debugsourceUpgrade openssh-serverUpgrade pam_ssh_agent_authUpgrade openssh-keycatUpgrade openssh-keycat-debuginfo | May 28, 2026 | Apr 2, 2026 |
| Debian | — | Upgrade openssh | May 17, 2026 | May 17, 2026 |
| Ibm Aix | — | Apply the fix or workaround for openssh_advisory21 | May 31, 2026 | May 28, 2026 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jul 2, 2026 | Jul 1, 2026 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 10.3 | Apr 28, 2026 | Apr 2, 2026 |
| Oracle_linux | — | Upgrade openssh-ldapUpgrade opensshUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-keysignUpgrade openssh-serverUpgrade pam_ssh_agent_auth | May 6, 2026 | Apr 2, 2026 |
| Redhat_linux | — | Upgrade openssh-cavsUpgrade opensshUpgrade openssh-keycat-debuginfoUpgrade openssh-keysignUpgrade openssh-ldapUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-ldap-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-serverUpgrade openssh-sk-dummy-debuginfoUpgrade openssh-clientsUpgrade openssh-cavs-debuginfoUpgrade openssh-clients-debuginfoUpgrade openssh-keysign-debuginfoUpgrade pam_ssh_agent_authNo solution existsUpgrade openssh-debugsource | May 4, 2026 | Apr 2, 2026 |
| Rocky_linux | — | Upgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keysign-debuginfoUpgrade openssh-ldap-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-serverUpgrade openssh-cavsUpgrade openssh-keycat-debuginfoUpgrade openssh-debugsourceUpgrade openssh-ldapUpgrade openssh-server-debuginfoUpgrade openssh-keycatUpgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-clients-debuginfoUpgrade openssh-keysignUpgrade openssh-askpassUpgrade openssh-clients | May 11, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade openssh-serverUpgrade openssh-client | Apr 29, 2026 | Apr 2, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Apr 2, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub