[UPDATE] [niedrig] OpenSSH: Mehrere Schwachstellen ermöglichen Codeausführung

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-02 10:21 UTC
Importiert: 2026-09-04 08:57 UTC
CVSS: 3.6
Quelle-ID: cert_bund
uid_hash: b2aab8450b921898ac7bc2c335866082e104aada5a469e28b15ad8f2a4f3ea97

CERT-Bund (BSI)

Inhalt

Ein lokaler Angreifer kann mehrere Schwachstellen in OpenSSH ausnutzen, um beliebigen Programmcode auszuführen.

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2025-61984	LOW	3.6	LOW	3.6			2025-10-06
CVE-2025-61985	LOW	3.6	LOW	3.6			2025-10-06

Externe Referenzen

Bezeichnung	Typ	CVE	Quelle
Red Hat Security Advisory RHSA-2025:23479 vom 2025-12-17	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2025:23481 vom 2025-12-17	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:0414 vom 2026-01-09	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:0685 vom 2026-01-15	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:0693 vom 2026-01-15	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:0950 vom 2026-01-22	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:0976 vom 2026-01-22	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:1652 vom 2026-02-02	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:1678 vom 2026-02-02	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:1790 vom 2026-02-03	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:1815 vom 2026-02-03	VENDOR	-	wid_csaf
Red Hat Security Advisory RHSA-2026:1858 vom 2026-02-03	VENDOR	-	wid_csaf
IBM Security Bulletin 7256328 vom 2026-01-06	EXTERNAL	-	wid_csaf
Amazon Linux Security Advisory ALAS2-2026-3175 vom 2026-02-19	EXTERNAL	-	wid_csaf
Fedora Security Advisory FEDORA-2026-9D457091E8 vom 2026-01-08	EXTERNAL	-	wid_csaf
Siemens Security Advisory SSA-019113 vom 2026-07-14	EXTERNAL	-	wid_csaf
PoC vom 2025-10-06	EXTERNAL	-	wid_csaf
SEPPmail 15.0.6 Release Notes vom 2026-07-21	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2025:23479 vom 2026-05-21	EXTERNAL	-	wid_csaf
Rocky Linux Security Advisory RLSA-2025:23481 vom 2025-12-18	EXTERNAL	-	wid_csaf
EU Vulnerability Database vom 2025-10-06	EXTERNAL	-	wid_csaf
EU Vulnerability Database vom 2025-10-06	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2025-23479 vom 2025-12-18	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2025-23480 vom 2025-12-18	EXTERNAL	-	wid_csaf
Oracle Linux Security Advisory ELSA-2025-23481 vom 2025-12-19	EXTERNAL	-	wid_csaf
Debian Security Advisory DLA-4584 vom 2026-05-15	EXTERNAL	-	wid_csaf
Debian Security Advisory DSA-6204 vom 2026-04-09	EXTERNAL	-	wid_csaf
openSUSE Security Update OPENSUSE-SU-2025-20122-1 vom 2025-12-01	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2025:21128-1 vom 2025-12-10	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2025:21161-1 vom 2025-12-10	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2025:4067-1 vom 2025-11-12	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2025:4098-1 vom 2025-11-14	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2025:4097-1 vom 2025-11-14	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2025:4112-1 vom 2025-11-17	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2025:21044-1 vom 2025-11-27	EXTERNAL	-	wid_csaf
SUSE Security Update SUSE-SU-2026:20662-1 vom 2026-03-18	EXTERNAL	-	wid_csaf
Brocade Security Advisory BSA-2026-3178 vom 2026-02-19	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8090-1 vom 2026-03-12	EXTERNAL	-	wid_csaf
Ubuntu Security Notice USN-8090-2 vom 2026-03-12	EXTERNAL	-	wid_csaf
Dell Security Advisory DSA-2026-030 vom 2026-01-30	EXTERNAL	-	wid_csaf
Dell Security Advisory DSA-2026-152 vom 2026-03-23	EXTERNAL	-	wid_csaf
IBM Security Bulletin 7268148 vom 2026-03-31	EXTERNAL	-	wid_csaf
IBM Security Bulletin 7286010 vom 2026-09-02	EXTERNAL	-	wid_csaf
Meinberg Security Advisory MBGSA-2025.07 vom 2025-12-02	EXTERNAL	-	wid_csaf
OpenSSH Release Notes vom 2025-10-06	EXTERNAL	-	wid_csaf

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
CERT-Bund (BSI)	cert_bund	government_cert		-	de	https://wid.cert-bund.de/content/public/securityAdvisory/rss

Zurueck zur Eintrags-Liste