openssh-ldap vulnerabilities (Red Hat)
46 vulnerabilities.
-
openssh-ldapRed Hat In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of... 4.8 Medium -
openssh-ldapRed Hat In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over... 5.9 Medium -
openssh-ldapRed Hat sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ... 4.2 Medium -
openssh-ldapRed Hat Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 5.0 Medium -
openssh-ldapRed Hat Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service 4.3 Medium -
openssh-ldapRed Hat OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios... 4.2 Medium -
openssh-ldapRed Hat OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. 2.5 Low -
openssh-ldapRed Hat OpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in... 3.1 Low -
openssh-ldapRed Hat In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within... 3.6 Low -
openssh-ldapRed Hat In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome... 7.5 High -
openssh-ldapRed Hat Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... 2.7 Low -
openssh-ldapRed Hat ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to... 3.6 Low -
openssh-ldapRed Hat ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain... 3.6 Low -
openssh-ldapRed Hat Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 6.8 Medium -
openssh-ldapRed Hat In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has... 6.5 Medium -
openssh-ldapRed Hat Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
openssh-ldapRed Hat The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search... 9.8 Critical -
openssh-ldapRed Hat sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,... 7.0 High -
openssh-ldapRed Hat scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated... 7.4 High -
openssh-ldapRed Hat The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an... 5.9 Medium -
openssh-ldapRed Hat An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp... 5.9 Medium -
openssh-ldapRed Hat An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display... 6.8 Medium -
openssh-ldapRed Hat In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access... 5.3 Medium -
openssh-ldapRed Hat OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for... 5.3 Medium -
openssh-ldapRed Hat sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer... 7.5 High -
openssh-ldapRed Hat The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write... 5.3 Medium -
openssh-ldapRed Hat The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH... 7.8 High -
openssh-ldapRed Hat authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on... 5.5 Medium -
openssh-ldapRed Hat Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows... 7.3 High -
openssh-ldapRed Hat The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password... 7.5 High -
openssh-ldapRed Hat sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses... 5.9 Medium -
openssh-ldapRed Hat The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin... 7.8 High -
openssh-ldapRed Hat Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote... 6.4 Medium -
openssh-ldapRed Hat The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding... 9.8 Critical -
openssh-ldapRed Hat The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH... 8.1 High -
openssh-ldapRed Hat The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7... 6.5 Medium -
openssh-ldapRed Hat Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in... 6.9 Medium -
openssh-ldapRed Hat The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous... 1.9 Low -
openssh-ldapRed Hat The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly... 8.5 High -
openssh-ldapRed Hat The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted... 4.3 Medium -
openssh-ldapRed Hat The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a... 4.0 Medium -
openssh-ldapRed Hat The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows... 5.8 Medium -
openssh-ldapRed Hat sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,... 4.9 Medium -
openssh-ldapRed Hat The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing... 5.0 Medium -
openssh-ldapRed Hat A certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and... 6.2 Medium -
openssh-ldapRed Hat The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with... 3.5 Low