openssh-keysign vulnerabilities (AlmaLinux)
23 vulnerabilities.
-
openssh-keysignAlmaLinux In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be... 2.5 Low -
openssh-keysignAlmaLinux In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of... 4.8 Medium -
openssh-keysignAlmaLinux In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to... 3.5 Low -
openssh-keysignAlmaLinux ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a... 7.7 High -
openssh-keysignAlmaLinux sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. 6.5 Medium -
openssh-keysignAlmaLinux sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource... 3.7 Low -
openssh-keysignAlmaLinux In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over... 5.9 Medium -
openssh-keysignAlmaLinux sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:... 4.8 Medium -
openssh-keysignAlmaLinux internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,... 4.2 Medium -
openssh-keysignAlmaLinux scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when... 4.2 Medium -
openssh-keysignAlmaLinux sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ... 4.2 Medium -
openssh-keysignAlmaLinux Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination 3.7 Low -
openssh-keysignAlmaLinux Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 5.0 Medium -
openssh-keysignAlmaLinux Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service 4.3 Medium -
openssh-keysignAlmaLinux OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios... 4.2 Medium -
openssh-keysignAlmaLinux OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. 2.5 Low -
openssh-keysignAlmaLinux OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in... 3.1 Low -
openssh-keysignAlmaLinux In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within... 3.6 Low -
openssh-keysignAlmaLinux In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome... 7.5 High -
openssh-keysignAlmaLinux Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... 2.7 Low -
openssh-keysignAlmaLinux ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to... 3.6 Low -
openssh-keysignAlmaLinux ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain... 3.6 Low -
openssh-keysignAlmaLinux In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the... 4.3 Medium