Vulnerabilities in OpenBSD

30 results
Vexday analysis

OpenBSD possui 29 vulnerabilidades registradas, com 1 crítica e nenhuma atualmente sob ataque ativo conforme o KEV, indicando risco contido no curto prazo. Contudo, 10 CVEs publicadas nos últimos 90 dias sinalizam pressão recente sobre a superfície de ataque, com predomínio de falhas relacionadas a CWE-1284 (problemas de encapsulamento/acesso a atributos). O perfil sugere vulnerabilidades de exploração moderada, exigindo monitoramento contínuo mas sem urgência crítica.

CVE-2025-32728MEDIUMIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent EPSS 0.2%CVE-2026-59998MEDIUMsshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in WindoEPSS 0.2%CVE-2026-35414MEDIUMOpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with aEPSS 0.2%CVE-2026-59997MEDIUMinternal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-lEPSS 0.2%CVE-2026-59999MEDIUMIn sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not.EPSS 0.2%CVE-2023-52556MEDIUMOpenBSD 7.4 pf state race condition kernel crashEPSS 0.1%CVE-2024-11149MEDIUMOpenBSD vmm GDTR limitsEPSS 0.1%CVE-2026-35388LOWOpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.EPSS 0.1%CVE-2026-57589HIGHsys/kern/sysv_sem.c in OpenBSD through 7.9 has a use-after-free allowing local privilege escalation to root. This is a context switch use-afEPSS 0.1%CVE-2025-61985LOWssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.EPSS 0.1%