python-asyncssh vulnerabilities (Debian)
8 vulnerabilities.
-
python-asyncsshDebian AsyncSSH: asyncio event-loop freeze via SSH maximum packet size = 0 in SSH_MSG_CHANNEL_OPEN / OPEN_CONFIRMATION 6.5 Medium -
python-asyncsshDebian AsyncSSH AuthorizedKeysFile username substitution bypass through ~ and environment expansion 5.9 Medium -
python-asyncsshDebian AsyncSSH: SCP Path Traversal to Arbitrary File Write 8.1 High -
python-asyncsshDebian AsyncSSH `AuthorizedKeysFile %u` path traversal allows attacker-selected authorized keys to authenticate a traversal username 8.2 High -
python-asyncsshDebian Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
python-asyncsshDebian AsyncSSH Rogue Session Attack 6.8 Medium -
python-asyncsshDebian AsyncSSH Rogue Extension Negotiation 5.9 Medium -
python-asyncsshDebian AsyncSSH SSH Server Authentication Bypass 9.8 Critical