5.0
CVSS 3.1
Няма данни
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Няма потвърждение
Атакува се
Няма данни
Време до експлоатация
Атакува се локално, при специфични условия, с обикновен потребителски вход и след действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката не може да се автоматизира
Описание
Оригинално описание
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack can compromise the confidentiality of forwarded X11 traffic, including sensitive window contents and input, and may allow some manipulation of the forwarded session.
Засегнати продукти
- Red Hat Red Hat Enterprise Linux 10: от 0:9.9p1-25.el10_2 нататък
- Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: от 0:9.9p1-7.el10_0.5 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:8.0p1-30.el8_10 нататък
- Red Hat Red Hat Enterprise Linux 8: от 0:8.0p1-30.el8_10 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:9.9p1-9.el9_8 нататък
- Red Hat Red Hat Enterprise Linux 9: от 0:9.9p1-9.el9_8 нататък
- Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: от 0:8.7p1-30.el9_2.13 нататък
- Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: от 0:8.7p1-38.el9_4.10 нататък
- Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: от 0:8.7p1-45.el9_6.5 нататък
- Red Hat Red Hat Hardened Images: от 10.3p1-6.hum1 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1791818590 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1791818589 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1791818505 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1791818496 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1791818502 нататък
- Red Hat Red Hat OpenShift AI 3.0: от 1793042072 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1791818602 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1791818598 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1791818512 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1791818587 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1791818778 нататък
- Red Hat Red Hat OpenShift AI 3.2: от 1791818512 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1791818782 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1791818782 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1791818627 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1791818790 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1791818874 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1791818792 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1791818662 нататък
- Red Hat Red Hat OpenShift AI 3.3: от 1791818877 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791883722 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791881612 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791885618 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791881487 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791881732 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791883315 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791881486 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791881769 нататък
- Red Hat Red Hat OpenShift AI 3.4: от 1791885505 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791819252 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791818749 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791819206 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791818979 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791819123 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791818901 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791820333 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791819495 нататък
- Red Hat Red Hat OpenShift AI 3.5: от 1791819104 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1786435483 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1786533529 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1787135742 нататък
- Red Hat Red Hat Update Infrastructure 5: от 1787241260 нататък
- Red Hat Red Hat Enterprise Linux 6
- Red Hat Red Hat Enterprise Linux 7
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat OpenShift Container Platform 4
- Red Hat Red Hat OpenShift Container Platform 5
Вид слабост
История
- 23 юни 2026 Публикувано
Други уязвимости в Red Hat Red Hat Enterprise Linux 10
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-55655
- https://nvd.nist.gov/vuln/detail/CVE-2026-55655
- https://access.redhat.com/errata/RHSA-2026:36759
- https://access.redhat.com/errata/RHSA-2026:47755
- https://access.redhat.com/errata/RHSA-2026:47756
- https://access.redhat.com/errata/RHSA-2026:47757
- https://access.redhat.com/errata/RHSA-2026:54387
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:76748
- https://access.redhat.com/errata/RHSA-2026:76993
- https://access.redhat.com/errata/RHSA-2026:80513
- https://access.redhat.com/errata/RHSA-2026:82749
- https://access.redhat.com/errata/RHSA-2026:82750
- https://access.redhat.com/errata/RHSA-2026:82751
- https://access.redhat.com/errata/RHSA-2026:82752
- https://access.redhat.com/errata/RHSA-2026:82753
- https://access.redhat.com/errata/RHSA-2026:82754
- https://access.redhat.com/errata/RHSA-2026:82755
- https://access.redhat.com/errata/RHSA-2026:82756
- https://access.redhat.com/errata/RHSA-2026:82757
- https://access.redhat.com/errata/RHSA-2026:82758
- https://access.redhat.com/errata/RHSA-2026:82759
- https://access.redhat.com/errata/RHSA-2026:82761
- https://access.redhat.com/errata/RHSA-2026:82762
- https://access.redhat.com/errata/RHSA-2026:82763
- https://access.redhat.com/errata/RHSA-2026:82897
- https://access.redhat.com/errata/RHSA-2026:82898
- https://access.redhat.com/errata/RHSA-2026:82899
- https://access.redhat.com/errata/RHSA-2026:82900
- https://access.redhat.com/errata/RHSA-2026:82901
- https://access.redhat.com/errata/RHSA-2026:82902
- https://access.redhat.com/errata/RHSA-2026:82903
- https://access.redhat.com/errata/RHSA-2026:82904
- https://access.redhat.com/errata/RHSA-2026:82907
- https://access.redhat.com/errata/RHSA-2026:82908
- https://access.redhat.com/errata/RHSA-2026:82909
- https://access.redhat.com/errata/RHSA-2026:82910
- https://access.redhat.com/errata/RHSA-2026:82912
- https://access.redhat.com/errata/RHSA-2026:82913
- https://access.redhat.com/errata/RHSA-2026:82914
- https://access.redhat.com/errata/RHSA-2026:82915
- https://access.redhat.com/errata/RHSA-2026:82916
- https://access.redhat.com/errata/RHSA-2026:82917
- https://access.redhat.com/errata/RHSA-2026:82918
- https://access.redhat.com/errata/RHSA-2026:82920
- https://access.redhat.com/errata/RHSA-2026:82921
- https://access.redhat.com/errata/RHSA-2026:82922
- https://access.redhat.com/errata/RHSA-2026:82923
- https://access.redhat.com/errata/RHSA-2026:89739
- https://access.redhat.com/errata/RHSA-2026:91232
- https://access.redhat.com/security/cve/CVE-2026-55655
- https://bugzilla.redhat.com/show_bug.cgi?id=2462250