Page 1 of 1

CVE-2026-110927 - Openssh: openssh: a compressed payload can expand past the maximum packet size

Posted: Thu Oct 15, 2026 4:22 pm
by Starburst-David
CVE ID :CVE-2026-110927
Published : Oct. 15, 2026, 2:17 p.m. | 1 hour, 5 minutes ago
Description :A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.
Severity: 4.3 | MEDIUM

More Information:
https://cvefeed.io/vuln/detail/CVE-2026-110927