openssh vulnerabilities (Debian)
123 vulnerabilities.
opensshDebianOpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a...7.8 HighopensshDebianopenssh - regression updateNo scoreopensshDebianIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...6.8 MediumopensshDebianAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...5.9 MediumopensshDebianAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...6.8 MediumopensshDebianIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...5.3 MediumopensshDebianopenssh - regression updateNo scoreopensshDebianRemotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote...5.3 MediumopensshDebianOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...5.3 MediumopensshDebiansshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer...7.5 HighopensshDebianThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...5.3 MediumopensshDebianThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH...7.8 HighopensshDebianauthfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on...5.5 MediumopensshDebiansshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain...7.0 HighopensshDebianUntrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...7.3 HighopensshDebian** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows...7.5 HighopensshDebianThe auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password...7.5 HighopensshDebiansshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses...5.9 MediumopensshDebianThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...7.8 HighopensshDebianMultiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote...6.4 MediumopensshDebianThe ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to...5.3 MediumopensshDebianThe client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding...9.8 CriticalopensshDebianThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...8.1 HighopensshDebianThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...6.5 MediumopensshDebianopenssh - regression updateNo scoreopensshDebianUse-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...6.9 MediumopensshDebianThe monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous...1.9 LowopensshDebianThe kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly...8.5 HighopensshDebianThe x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted...4.3 MediumopensshDebianThe verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows...5.8 MediumopensshDebiansshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...4.9 MediumopensshDebianThe mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES...6.0 MediumopensshDebianThe default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing...5.0 MediumopensshDebianThe ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...3.5 LowopensshDebianThe auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug...3.5 LowopensshDebianThe key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy...5.0 MediumopensshDebianError handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through...2.6 LowopensshDebianA certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny;...5.0 MediumopensshDebiansshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote...6.5 MediumopensshDebianThe ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys...5.0 MediumopensshDebianOpenSSL 0.9.8c-1 up to versions before 0.9.8g-9 on Debian-based operating systems uses a random...7.5 HighopensshDebianOpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config...6.5 MediumopensshDebianOpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections...6.9 MediumopensshDebianssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and...7.5 HighopensshDebianOpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to...4.3 MediumopensshDebianOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers...5.0 MediumopensshDebianUnspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes...7.5 HighopensshDebianpacket.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by...5.0 MediumopensshDebianUnspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...5.0 MediumopensshDebianSignal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...8.1 High- Show moreLoading…