CVE details
CVE-2026-106585
In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.
- Score
- 6.5 medium
- Published
- 2026-10-06
- Links
- NVD · cve.org · Report wrong data
Matched ports (3)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| security/openssh-portable | openssh-portable | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-gssapi | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |
| security/openssh-portable | openssh-portable-hpn | 10.6.p1,1 | fixed by update | bdrewery@FreeBSD.org |