CVE security advisories and vulnerability history for openssh by openbsd.
140
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
33
Public exploits
PoC or exploit code
6.3
Avg CVSS
2000–2026
Last updated
Overview
openbsd openssh has 140 published CVE records since 2000, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 33 have a known public exploit. The average CVSS base score across scored CVEs is 6.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting openbsd openssh, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include content services switch 11000, debian linux, enterprise linux, enterprise linux desktop, enterprise linux eus, fedora.
Severity and exploitation
How the CVSS severity of openbsd openssh's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical14
High46
Medium65
Low15
In CISA’s Known Exploited Vulnerabilities catalog
0
None of openbsd openssh's CVEs are currently listed in CISA's KEV catalog.
Public exploits
33
33 of openbsd openssh's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every openbsd openssh version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
3.0 <= v <= 3.019 CVEs
3.0.1 <= v <= 3.0.118 CVEs
3.0.2 <= v <= 3.0.218 CVEs
3.0.2p1 <= v <= 3.0.2p118 CVEs
3.0p1 <= v <= 3.0p118 CVEs
3.1 <= v <= 3.118 CVEs
3.2 <= v <= 3.218 CVEs
1.2.3 <= v <= 1.2.317 CVEs
2.1 <= v <= 2.117 CVEs
3.0.1p1 <= v <= 3.0.1p117 CVEs
3.1p1 <= v <= 3.1p117 CVEs
Common weakness types
The CWE weakness categories most often found in openbsd openssh CVEs. Follow any weakness for its full explanation.
Common questions about openbsd openssh vulnerabilities.
How many CVEs does openbsd openssh have?
openbsd openssh has 140 published CVE records since 2000.
How many openbsd openssh CVEs are in CISA KEV?
None of openbsd openssh's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for openbsd openssh vulnerabilities?
Yes — 33 of openbsd openssh's CVEs have a known public exploit.
Which versions of openbsd openssh are affected?
184 distinct openbsd openssh versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in openbsd openssh CVEs?
openbsd openssh's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-670 (Always-Incorrect Control Flow Implementation), CWE-20 (Improper Input Validation).
How many critical openbsd openssh vulnerabilities are there?
openbsd openssh has 14 critical and 46 high-severity CVEs.
What is the average severity of openbsd openssh CVEs?
The average CVSS base score across openbsd openssh's scored CVEs is 6.3.
