CVE-2026-60000

ADVISORY - debian

Summary

sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication.

openssh 1:10.4p1-1 [trixie] - openssh (Minor issue) [bookworm] - openssh (Minor issue) [bullseye] - openssh (Minor issue) https://www.openssh.org/releasenotes.html#10.4p1

EPSS Score⁠: 0.00441 (0.365)

Common Weakness Enumeration (CWE)

ADVISORY - redhat

CWE-307⁠

Improper Restriction of Excessive Authentication Attempts

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.