openssh-server-sysvinit vulnerabilities (Red Hat)

20 vulnerabilities.

• openssh-server-sysvinit Red Hat The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search... CVE-2023-38408 Public exploitFix available EPSS 79.7% 9.8 CriticalJuly 19, 2023
• openssh-server-sysvinit Red Hat sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,... CVE-2021-41617 Public exploitFix available 7.0 HighSeptember 26, 2021
• openssh-server-sysvinit Red Hat OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for... CVE-2018-15473 Public exploitFix available EPSS 98.7% 5.3 MediumAugust 17, 2018
• openssh-server-sysvinit Red Hat sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer... CVE-2016-10708 Public exploitFix available EPSS 15.7% 7.5 HighJanuary 21, 2018
• openssh-server-sysvinit Red Hat The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write... CVE-2017-15906 Fix available 5.3 MediumOctober 25, 2017
• openssh-server-sysvinit Red Hat The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH... CVE-2016-10012 Fix available 7.8 HighJanuary 4, 2017
• openssh-server-sysvinit Red Hat authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on... CVE-2016-10011 Fix available 5.5 MediumJanuary 4, 2017
• openssh-server-sysvinit Red Hat Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows... CVE-2016-10009 Public exploitFix available EPSS 37.4% 7.3 HighJanuary 4, 2017
• openssh-server-sysvinit Red Hat The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password... CVE-2016-6515 Public exploitFix available EPSS 58.6% 7.5 HighAugust 7, 2016
• openssh-server-sysvinit Red Hat sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses... CVE-2016-6210 Public exploitFix available EPSS 88.9% 5.9 MediumJuly 18, 2016
• openssh-server-sysvinit Red Hat The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin... CVE-2015-8325 Fix available 7.8 HighApril 15, 2016
• openssh-server-sysvinit Red Hat Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote... CVE-2016-3115 Public exploitFix available EPSS 35.5% 6.4 MediumMarch 10, 2016
• openssh-server-sysvinit Red Hat The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding... CVE-2016-1908 Fix available EPSS 13.7% 9.8 CriticalJanuary 15, 2016
• openssh-server-sysvinit Red Hat The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH... CVE-2016-0778 Fix available EPSS 20.9% 8.1 HighJanuary 14, 2016
• openssh-server-sysvinit Red Hat The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7... CVE-2016-0777 Public exploitFix available EPSS 63.5% 6.5 MediumJanuary 14, 2016
• openssh-server-sysvinit Red Hat Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in... CVE-2015-6564 Fix available 6.9 MediumAugust 24, 2015
• openssh-server-sysvinit Red Hat The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous... CVE-2015-6563 Fix available 1.9 LowAugust 24, 2015
• openssh-server-sysvinit Red Hat The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly... CVE-2015-5600 Public exploitFix available 8.5 HighJuly 28, 2015
• openssh-server-sysvinit Red Hat The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a... CVE-2014-9278 4.0 MediumDecember 6, 2014
• openssh-server-sysvinit Red Hat The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows... CVE-2014-2653 Fix available 5.8 MediumMarch 27, 2014