Approved changes feed: RSS · Atom

cpe:2.3:a:openbsd:openssh:8.6:-:*:*:*:*:*:*

part: a version: 8.6 update: -

VendorOpenbsd (932cdfc2-94b9-5fb6-8ef3-d0b271f414b5)
ProductOpenssh (00fc4953-faf7-5f04-8d3d-4edd44206199)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/openssh/openssh-portable purl2cpe 2026-06-01 10:17:38.304903
pkg:mindrot/openss purl2cpe 2026-06-01 10:17:38.304905
pkg:openbsd/openssh purl2cpe 2026-06-01 10:17:38.304906
pkg:rpm/fedora/openssh purl2cpe 2026-06-01 10:17:38.304907
pkg:rpm/opensuse/openssh purl2cpe 2026-06-01 10:17:38.304909

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6387 vulnerable 2026-06-08 06:58:19.314155 Openssh: regresshion - race condition in ssh allows rce/dos
HIGH (8.1)
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Published: 2024-07-01T12:37:25.431Z
Updated: 2026-05-12T11:39:26.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14145 vulnerable 2026-06-08 05:18:02.095599 Details available
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
Published: 2020-06-29T17:33:36.000Z
Updated: 2025-12-18T14:41:37.776Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.