CVE-2026-110926
CVE-2026-110926 · UBUNTU-CVE-2026-110926
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel by chosen-plaintext lengths.
CVSS 5.3 · Medium
- Published
- Updated
Stack: system
Affected products and versions
openssh-ssh1 Ubuntu:18.04:LTS
- Versions
- 1:7.5p1-8
- 1:7.5p1-9
- 1:7.5p1-9build1
- 1:7.5p1-10
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh-ssh1 Ubuntu:20.04:LTS
- Versions
- 1:7.5p1-11build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh-ssh1 Ubuntu:22.04:LTS
- Versions
- 1:7.5p1-12
- 1:7.5p1-12build1
- 1:7.5p1-13
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh-ssh1 Ubuntu:24.04:LTS
- Versions
- 1:7.5p1-14
- 1:7.5p1-15
- 1:7.5p1-15build1
- 1:7.5p1-16
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh-ssh1 Ubuntu:26.10
- Versions
- 1:7.5p1-18
- 1:7.5p1-18ubuntu1
- 1:7.5p1-18ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
openssh-ssh1 Ubuntu:26.04:LTS
- Versions
- 1:7.5p1-17
- 1:7.5p1-18
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published