sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssh-cavsUpgrade openssh-askpassUpgrade openssh-ldapUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-serverUpgrade opensshUpgrade pam_ssh_agent_auth | Oct 21, 2026 | Oct 20, 2026 |
| Alpine Linux | — | Upgrade openssh | Sep 1, 2026 | Jul 8, 2026 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 10.4 | Aug 18, 2026 | Jul 8, 2026 |
| Oracle_linux | — | Upgrade openssh-keysignUpgrade opensshUpgrade openssh-serverUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-ldapUpgrade openssh-clientsUpgrade pam_ssh_agent_authUpgrade openssh-keycat | Oct 22, 2026 | Jul 8, 2026 |
| Redhat_linux | — | Upgrade openssh-clients-debuginfoUpgrade openssh-keycatUpgrade openssh-ldapUpgrade opensshUpgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-ldap-debuginfoUpgrade openssh-debuginfoUpgrade openssh-keycat-debuginfoUpgrade openssh-keysignUpgrade openssh-cavs-debuginfoUpgrade openssh-debugsourceUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-server-debuginfoUpgrade openssh-cavsUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-askpass-debuginfoUpgrade openssh-keysign-debuginfoUpgrade openssh-sk-dummy-debuginfoNo solution exists | Jul 17, 2026 | Jul 8, 2026 |
| Rocky_linux | — | Upgrade openssh-debugsourceUpgrade openssh-keysignUpgrade openssh-keycat-debuginfoUpgrade opensshUpgrade openssh-debuginfoUpgrade openssh-cavs-debuginfoUpgrade openssh-ldap-debuginfoUpgrade openssh-askpassUpgrade openssh-cavsUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keycatUpgrade openssh-ldapUpgrade openssh-askpass-debuginfoUpgrade openssh-server-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade openssh-clients-debuginfoUpgrade openssh-serverUpgrade openssh-keysign-debuginfo | Oct 23, 2026 | Oct 22, 2026 |
| Ubuntu | — | Upgrade openssh-server (Ubuntu Pro)Upgrade openssh-client (Ubuntu Pro)Upgrade openssh-clientUpgrade openssh-server | Jul 13, 2026 | Jul 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 22, 2026 | Jul 8, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub