The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade pam_ssh_agent_authUpgrade openssh-clientsUpgrade opensshUpgrade openssh-askpassUpgrade openssh-serverUpgrade openssh-keysignUpgrade openssh-keycat | Aug 2, 2026 | Jul 29, 2026 |
| Oracle_linux | — | Upgrade openssh-clientsUpgrade openssh-keycatUpgrade opensshUpgrade openssh-askpassUpgrade pam_ssh_agent_authUpgrade openssh-keysignUpgrade openssh-server | Oct 22, 2026 | Jun 23, 2026 |
| Redhat_linux | — | Upgrade openssh-keysign-debuginfoUpgrade openssh-sk-dummy-debuginfoUpgrade pam_ssh_agent_authUpgrade openssh-clients-debuginfoUpgrade openssh-debugsourceUpgrade openssh-keycatUpgrade openssh-server-debuginfoUpgrade opensshUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-keysignUpgrade openssh-askpass-debuginfoUpgrade openssh-askpassUpgrade openssh-keycat-debuginfoUpgrade openssh-clientsUpgrade openssh-debuginfoUpgrade openssh-server | Jul 17, 2026 | Jun 22, 2026 |
| Rocky_linux | — | Upgrade openssh-keycat-debuginfoUpgrade pam_ssh_agent_auth-debuginfoUpgrade openssh-askpass-debuginfoUpgrade openssh-serverUpgrade openssh-debugsourceUpgrade openssh-debuginfoUpgrade openssh-clientsUpgrade openssh-clients-debuginfoUpgrade openssh-askpassUpgrade opensshUpgrade pam_ssh_agent_authUpgrade openssh-server-debuginfoUpgrade openssh-keycat | Aug 3, 2026 | Jul 30, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub