CVE-2026-110927

medium

Description

A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-102055

https://bugzilla.redhat.com/show_bug.cgi?id=2553037

https://access.redhat.com/security/cve/CVE-2026-110927

https://access.redhat.com/errata/RHSA-2026:82247

Details

Source: Mitre, NVD

Published: 2026-10-15

Updated: 2026-10-15

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L