openssh vulnerabilities (Debian)
123 vulnerabilities.
-
opensshDebian sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround... 8.1 High -
opensshDebian authorized_keys restrict does not apply to tunnel forwarding No score -
opensshDebian In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading... 2.5 Low -
opensshDebian In sshd in OpenSSH through 10.6, in certain environments such as QNX 6 and SCO OpenServer 5, sshd... 2.9 Low -
opensshDebian In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes... 3.6 Low -
opensshDebian In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be... 2.5 Low -
opensshDebian In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length... 6.5 Medium -
opensshDebian In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because... 2.5 Low -
opensshDebian In sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is... 3.7 Low -
opensshDebian In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be... 2.2 Low -
opensshDebian In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a... 2.2 Low -
opensshDebian In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be... 4.2 Medium -
opensshDebian In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be... 2.5 Low -
opensshDebian In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of... 4.8 Medium -
opensshDebian In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to... 3.5 Low -
opensshDebian ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a... 7.7 High -
opensshDebian sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. 6.5 Medium -
opensshDebian sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource... 3.7 Low -
opensshDebian In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over... 5.9 Medium -
opensshDebian sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:... 4.8 Medium -
opensshDebian internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,... 4.2 Medium -
opensshDebian scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when... 4.2 Medium -
opensshDebian sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ... 4.2 Medium -
opensshDebian Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination 3.7 Low -
opensshDebian OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios... 4.2 Medium -
opensshDebian OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. 2.5 Low -
opensshDebian OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in... 3.1 Low -
opensshDebian In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within... 3.6 Low -
opensshDebian In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome... 7.5 High -
opensshDebian Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... 2.7 Low -
opensshDebian ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to... 3.6 Low -
opensshDebian ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain... 3.6 Low -
opensshDebian In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the... 4.3 Medium -
opensshDebian Openssh: denial-of-service in openssh 5.9 Medium -
opensshDebian Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 6.8 Medium -
opensshDebian OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password... 7.5 High -
opensshDebian Openssh: regresshion - race condition in ssh allows rce/dos 8.1 High -
opensshDebian In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has... 6.5 Medium -
opensshDebian In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.... 5.5 Medium -
opensshDebian Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
opensshDebian The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search... 9.8 Critical -
opensshDebian ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop... 9.8 Critical -
opensshDebian OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms... 6.5 Medium -
opensshDebian ** DISPUTED ** An issue was discovered in OpenSSH before 8.9. If a client is using public-key... 3.7 Low -
opensshDebian sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,... 7.0 High -
opensshDebian OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of... 5.3 Medium -
opensshDebian ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common... 7.1 High -
opensshDebian scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated... 7.4 High -
opensshDebian The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an... 5.9 Medium -
opensshDebian ** DISPUTED ** The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server... 7.5 High - Show olderLoading…