sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade pam_ssh_agent_authUpgrade opensshUpgrade openssh-clientsUpgrade openssh-keycatUpgrade openssh-server-sysvinitUpgrade openssh-askpassUpgrade openssh-cavsUpgrade openssh-debuginfoUpgrade openssh-ldapUpgrade openssh-server | Aug 28, 2019 | Jan 21, 2018 |
| Debian | — | Upgrade openssh | Feb 25, 2019 | Jan 21, 2018 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Apr 11, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade openssh-askpassUpgrade opensshUpgrade openssh-serverUpgrade openssh-keycatUpgrade openssh-clients | Mar 16, 2018 | Jan 21, 2018 |
| Huawei Euleros 2_0_sp2 | — | Upgrade opensshUpgrade openssh-keycatUpgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-clients | Mar 16, 2018 | Jan 21, 2018 |
| Openbsd Openssh | — | Upgrade to OpenSSH version 7.4 | Feb 12, 2018 | Jan 21, 2018 |
| Redhat_linux | — | Upgrade openssh-askpassUpgrade openssh-cavsUpgrade opensshUpgrade openssh-server-sysvinitUpgrade openssh-debuginfoUpgrade openssh-keycatUpgrade openssh-clientsUpgrade openssh-serverNo solution existsUpgrade pam_ssh_agent_authUpgrade openssh-ldap | Feb 7, 2018 | Aug 1, 2017 |
| Suse | — | Upgrade openssh-openssl1Upgrade openssh-helpersUpgrade opensshUpgrade openssh-openssl1-helpersUpgrade openssh-fipsUpgrade openssh-askpassUpgrade openssh-askpass-gnome | Jul 20, 2018 | Jan 21, 2018 |
| Ubuntu | — | Upgrade openssh-server | Nov 13, 2018 | Jan 21, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub