A heap out‑of‑bounds read flaw exists in OpenSSH, triggered during the cleanup of GSSAPI indicator arrays when a trailing NULL terminator is omitted. The vulnerability is a CWE‑125 boundary error that can cause the SSH authentication process to crash or abort. The crash disables the SSH service, resulting in a denial of service for users attempting to log in over SSH.

Red Hat Enterprise Linux 6 through 10, Red Hat Hardened Images, and Red Hat OpenShift Container Platform 4 are affected by the version of OpenSSH that contains the flaw. The affected component is the GSSAPI authentication module within OpenSSH; specific patch levels are not enumerated in the data set.

The CVSS score of 3.7 indicates a moderate severity and the absent EPSS score means the exploitation likelihood is uncertain. The vulnerability is not listed in the CISA KEV catalog, suggesting no known public exploits. The attack vector is inferred to be a remote attacker who can configure SSH to use GSSAPI authentication in a Kerberos environment, triggering the crash. The primary impact is a loss of service availability for the SSH daemon.