CLEANSTART-2026-SJ24518
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SJ24518.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2026-SJ24518
- Upstream
- Published
- 2026-10-20T00:39:11Z
- Modified
- 2026-10-21T01:15:28Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users
- Details
-
CVE-2026-39827 affects multiple packages. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. See references for individual vulnerability details.
- References
Affected packages
CleanStart / gatekeeper-fips
Package
- Name
- gatekeeper-fips
- Purl
- pkg:apk/cleanstart/gatekeeper-fips