Vulnerabilidades en OpenBSD
51 resultadosCVE-2026-123158HIGHsshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (relatedEPSS 1.0%CVE-2023-52558HIGHOpenBSD 7.4 and 7.3 m_split() network buffer kernel crashEPSS 0.7%CVE-2026-60000LOWsshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attemptEPSS 0.6%CVE-2026-56101MEDIUMOpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoSEPSS 0.6%CVE-2026-35385HIGHIn OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the EPSS 0.6%CVE-2023-52557HIGHOpenBSD 7.3 invalid l2tp message npppd crashEPSS 0.6%CVE-2026-56099MEDIUMOpenBSD mpls_do_error Kernel Stack Memory Disclosure via MPLS InputEPSS 0.5%CVE-2025-61984LOWssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leadinEPSS 0.5%CVE-2025-30334HIGHOpenBSD wg(4) kernel crashEPSS 0.4%CVE-2024-11148HIGHOpenBSD httpd(8) null dereferenceEPSS 0.4%CVE-2024-10934CRITICALOpenBSD NFS double-free vulnerabilityEPSS 0.4%CVE-2026-103547CRITICALIn ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated only by the LDAP chEPSS 0.4%CVE-2026-106552MEDIUMIn sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recuEPSS 0.4%CVE-2026-55706MEDIUMsppp_pap_input in sys/net/if_spppsubr.c in OpenBSD before 076e2b1 allows authentication bypass via certain zero values for lengths.EPSS 0.4%CVE-2026-35386LOWIn OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line. This requires a scenario wEPSS 0.3%CVE-2026-60002HIGHssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only EPSS 0.3%CVE-2026-60001MEDIUMsshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.EPSS 0.3%CVE-2024-10933MEDIUMOpenBSD readdir directory traversalEPSS 0.3%CVE-2026-59996MEDIUMscp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinaEPSS 0.3%CVE-2026-59995MEDIUMsftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attackerEPSS 0.3%