PT-2026-29835 · Openbsd+4 · Openssh+4

Rabbit · Publicado 2026-04-02 · Atualizado 2026-06-11 · CVE-2026-35388

Positive Technologies (AI Summary) · Pt

CVSS v3.1

2.5

Baixa

Vetor base

AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenSSH versões anteriores a 10.3

Description As versões OpenSSH anteriores a 10.3 não confirmam a multiplexação de conexão em sessões de multiplexação no modo proxy.

Recommendations Atualize para a versão 10.3 ou posterior.

Correção

DoS

Enumeração de Fraquezas

CWE-420

Identificadores relacionados

ALSA-2026:13380

ALSA-2026:13381

ALSA-2026:13383

ALSA-2026:19069

ALSA-2026:19219

CVE-2026-35388

ECHO-15A9-2872-255F

JLSEC-2026-77

OESA-2026-1963

OPENSUSE-SU-2026:10937-1

RHSA-2026:12389

RHSA-2026:13380

RHSA-2026:13381

RHSA-2026:13383

RHSA-2026:19069

RHSA-2026:19219

SUSE-SU-2026:22067-1

SUSE-SU-2026:2371-1

SUSE-SU-2026:2375-1

USN-8222-1

Produtos afetados

Ibm Aix

Linuxmint

Openssh

Rocky Linux

Ubuntu

Referências · 73

• https://suse.com/support/update/announcement/2026/suse-su-20262375-1 · Nota
• https://ubuntu.com/security/CVE-2026-35386 · Aviso do Fabricante
• https://bugzilla.suse.com/1259642 · Nota
• https://access.redhat.com/errata/RHSA-2026:19219 · Nota
• https://osv.dev/vulnerability/ALSA-2026:19069 · Aviso do Fabricante
• https://bugzilla.redhat.com/2454469 · Nota
• https://osv.dev/vulnerability/SUSE-SU-2026:22067-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-3497 · Nota de Segurança
• https://ubuntu.com/security/notices/USN-8222-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-8222-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-35385 · Nota de Segurança
• https://errata.almalinux.org/9/ALSA-2026-13381.html · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2026:13381 · Nota
• https://ubuntu.com/security/CVE-2026-35388 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-35388 · Aviso do Fabricante