> Debian OpenSSH Critical DSA-6204-1 CVE-2026-3497 Remote DoS Execution
[DATE: 09/04/2026 20:34]
[LANGUAGE: EN]
Jeremy Brown discovered a flaw in the GSSAPI Key Exchange patch applied in Debian to OpenSSH, an implementation of the SSH protocol suite, affecting non-default configurations with the GSSAPIKeyExchange setting enabled. A remote attacker can take advantage of this flaw to cause a denial of service, or potentially the execution of arbitrary code.