Every CVE Search/ Get API key

CVE-2014-2532

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...

4.9 MediumFix available

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
None

Exploit likelihood

4.75%Up 2.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

CVE List 4.2

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

Record
CVE-2014-2532
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Weakness
CWE-266, CWE-20
Updated
2026-11-02
EUVDEUVD-2014-2568 4.2

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

Record
EUVD-2014-2568
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-qf84-3fjj-8852 4.9

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

Record
GHSA-qf84-3fjj-8852
CVSS 3.0
4.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Weakness
CWE-20
Updated
2026-11-02
NVD 4.2

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

Record
CVE-2014-2532
CVSS 3.1
4.2 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
CVSS 3.0
4.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
CVSS 2.0
5.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:N
Weakness
CWE-264, CWE-20, CWE-266
Updated
2026-11-02
OSV 4.9

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

Record
CVE-2014-2532
CVSS 3.0
4.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2014-2532 4.9

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.

Record
DEBIAN-CVE-2014-2532
CVSS 3.0
4.9 MediumCVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVMGASA-2014-0143 No score

Updated openssh packages fix CVE-2014-2532

Updated openssh packages fix security vulnerability:

sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character (CVE-2014-2532).

Record
MGASA-2014-0143
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openssh
Debian:12
 before 1:6.6p1-1
1:6.6p1-1
openssh
Debian:13
 before 1:6.6p1-1
1:6.6p1-1
openssh
Debian:14
 before 1:6.6p1-1
1:6.6p1-1
openssh
Debian:6.0
From an advisory covering 2 CVEs
 before 1:5.5p1-6+squeeze5, plus listed versions
1:5.5p1-61:5.5p1-6+squeeze11:5.5p1-6+squeeze21:5.5p1-6+squeeze31:5.5p1-6+squeeze4
1:5.5p1-6+squeeze5
openssh
Debian:7
From an advisory covering 2 CVEs
 before 1:6.0p1-4+deb7u1, plus listed versions
1:6.0p1-4
1:6.0p1-4+deb7u1
openssh
Mageia:3
 before 6.1p1-4.2.mga3
6.1p1-4.2.mga3
openssh
Mageia:4
 before 6.2p2-3.1.mga4
6.2p2-3.1.mga4
openssh-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-ldap
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:0.9.3-104.el6
0:0.9.3-104.el6
Show 25 moreShow less
Affected packages
PackageAffectedFixed
openssh
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-askpass
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-clients
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-server
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-askpass
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-ldap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:0.9.3-104.el6
0:0.9.3-104.el6
openssh
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-clients
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-server
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-ldap
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:0.9.3-104.el6
0:0.9.3-104.el6
openssh
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-askpass
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-clients
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-server
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-ldap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
pam_ssh_agent_auth
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:0.9.3-104.el6
0:0.9.3-104.el6
openssh
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-askpass
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-clients
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6
openssh-server
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:5.3p1-104.el6
0:5.3p1-104.el6

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-2532 is a medium vulnerability (CVSS 4.9) in Openbsd Openssh, published March 18, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.75%, the 91st percentile. Fixed in openssh 1:6.6p1-1.

References

Show 41 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open