vulnerability

Alpine Linux: CVE-2025-61984: Improper Handling of Invalid Use of Special Elements

Severity
3
CVSS
(AV:L/AC:M/Au:S/C:P/I:P/A:N)
Published
Oct 6, 2025
Added
Dec 1, 2025
Modified
Dec 22, 2025

Description

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Solution

alpine-linux-upgrade-openssh
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.