GHSA-hq2f-vwrj-48j9MediumCVSS 4.3

A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand...

Published
October 15, 2026
Last Modified
October 15, 2026

🔗 CVE IDs covered (1)

📋 Description

A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.

🔗 References (5)