Description
CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.
Published: 2026-10-15
Score: 4.3 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 21 Oct 2026 07:30:00 +0000

Type Values Removed Values Added
Title Openssh: openssh: a compressed payload can expand past the maximum packet size openssh: openssh: a compressed payload can expand past the maximum packet size
References
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 21 Oct 2026 07:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection. CVE-2026-110927 has been marked as a duplicate of CVE-2026-106585.
CPEs cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat enterprise Linux
Redhat openshift

Fri, 16 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Thu, 15 Oct 2026 19:45:00 +0000

Type Values Removed Values Added
References

Thu, 15 Oct 2026 19:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 15 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
Description A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.
Title Openssh: openssh: a compressed payload can expand past the maximum packet size
First Time appeared Redhat
Redhat enterprise Linux
Redhat hummingbird
Redhat openshift
Weaknesses CWE-770
CPEs cpe:/a:redhat:hummingbird:1
cpe:/a:redhat:openshift:4
cpe:/o:redhat:enterprise_linux:10
cpe:/o:redhat:enterprise_linux:6
cpe:/o:redhat:enterprise_linux:7
cpe:/o:redhat:enterprise_linux:8
cpe:/o:redhat:enterprise_linux:9
Vendors & Products Redhat
Redhat enterprise Linux
Redhat hummingbird
Redhat openshift
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

Subscriptions

Redhat Hummingbird
cve-icon MITRE

Status: REJECTED

Assigner: redhat

Published:

Updated: 2026-10-21T06:48:13.674Z

Reserved: 2026-10-15T04:33:39.253Z

Link: CVE-2026-110927

cve-icon Vulnrichment

Updated:

cve-icon NVD

Status : Rejected

Published: 2026-10-15T14:17:22.760

Modified: 2026-10-21T07:17:17.647

Link: CVE-2026-110927

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-15T00:00:00Z

Links: CVE-2026-110927 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-16T07:15:17Z

Weaknesses
  • CWE-770

    Allocation of Resources Without Limits or Throttling