Product by Debian
Openssh
25 known vulnerabilities in Openssh (Debian), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-6387 | Openssh: regresshion - race condition in ssh allows rce/dos | 8.1 | |
| Critical | CVE-2016-1908 | OpenBSD OpenSSH: security vulnerability | 9.8 | |
| High | CVE-2006-5051 | OpenBSD OpenSSH: Double Free | 8.1 | |
| High | CVE-2026-3497 | Ubuntu Openssh: Use of Uninitialized Resource | 7.5 | |
| Medium | CVE-2025-26466 | Openssh: denial-of-service in openssh | 5.9 | |
| Medium | CVE-2025-26465 | Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled | 6.8 | |
| Medium | CVE-2023-48795 | SSH Communications Security SSH daemon: security vulnerability | 5.9 | |
| High | CVE-2016-10708 | OpenBSD OpenSSH: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2023-51385 | OpenBSD OpenSSH: OS Command Injection | 6.5 | |
| Medium | CVE-2019-6111 | OpenBSD OpenSSH: Path Traversal | 5.9 | |
| Medium | CVE-2018-15473 | OpenBSD OpenSSH: security vulnerability | 5.3 | |
| Medium | CVE-2019-6109 | OpenBSD OpenSSH: security vulnerability | 6.8 | |
| Medium | CVE-2018-20685 | OpenBSD OpenSSH: security vulnerability | 5.3 | |
| Medium | CVE-2017-15906 | OpenBSD OpenSSH: security vulnerability | 5.3 | |
| High | CVE-2026-35385 | OpenBSD OpenSSH: Improper Preservation of Permissions | 7.5 | |
| Low | CVE-2021-36368 | OpenBSD OpenSSH: Authentication Bypass | 3.7 | |
| High | CVE-2015-8325 | OpenBSD OpenSSH: Privilege Escalation | 7.8 | |
| Medium | CVE-2025-32728 | OpenBSD OpenSSH: Expected Behavior Violation | 4.3 | |
| Medium | CVE-2023-51384 | OpenBSD OpenSSH: security vulnerability | 5.5 | |
| Low | CVE-2025-61984 | OpenBSD OpenSSH: Improper Handling of Invalid Use of Special Elements | 3.6 | |
| High | CVE-2026-35386 | OpenBSD OpenSSH: Incorrect Behavior Order | 3.6 | |
| High | CVE-2026-35414 | OpenBSD OpenSSH: Always-Incorrect Control Flow Implementation | 4.2 | |
| Medium | CVE-2026-35387 | OpenBSD OpenSSH: Always-Incorrect Control Flow Implementation | 3.1 | |
| Low | CVE-2025-61985 | OpenBSD OpenSSH: Improper Neutralization of Null Byte or NUL Character | 3.6 | |
| Low | CVE-2026-35388 | OpenBSD OpenSSH: Unprotected Alternate Channel | 2.5 |