openssh-server vulnerabilities (Red Hat)
89 vulnerabilities.
openssh-serverRed HatOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...5.3 Mediumopenssh-serverRed Hatsshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer...7.5 Highopenssh-serverRed HatThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...5.3 Mediumopenssh-serverRed HatThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH...7.8 Highopenssh-serverRed Hatauthfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on...5.5 Mediumopenssh-serverRed HatUntrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...7.3 Highopenssh-serverRed HatThe auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password...7.5 Highopenssh-serverRed Hatsshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses...5.9 Mediumopenssh-serverRed HatThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...7.8 Highopenssh-serverRed HatMultiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote...6.4 Mediumopenssh-serverRed HatThe client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding...9.8 Criticalopenssh-serverRed HatThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...8.1 Highopenssh-serverRed HatThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...6.5 Mediumopenssh-serverRed HatUse-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...6.9 Mediumopenssh-serverRed HatThe monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous...1.9 Lowopenssh-serverRed HatThe kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly...8.5 Highopenssh-serverRed HatThe x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted...4.3 Mediumopenssh-serverRed HatThe OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a...4.0 Mediumopenssh-serverRed HatThe verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows...5.8 Mediumopenssh-serverRed Hatsshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...4.9 Mediumopenssh-serverRed HatThe default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing...5.0 Mediumopenssh-serverRed HatA certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and...6.2 Mediumopenssh-serverRed HatThe ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...3.5 Lowopenssh-serverRed HatA certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in...6.9 Mediumopenssh-serverRed HatError handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through...2.6 Lowopenssh-serverRed HatCertain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008...9.3 Highopenssh-serverRed HatOpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections...6.9 Mediumopenssh-serverRed HatUnspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on...4.3 Mediumopenssh-serverRed Hatssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and...7.5 Highopenssh-serverRed HatUnspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes...7.5 Highopenssh-serverRed HatUnspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...5.0 Mediumopenssh-serverRed HatSignal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...8.1 Highopenssh-serverRed Hatsshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to...7.8 Highopenssh-serverRed Hatscp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain...4.6 Mediumopenssh-serverRed Hatsshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials...5.0 Mediumopenssh-serverRed HatSSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames,...1.2 Lowopenssh-serverRed Hatsshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege...5.0 Mediumopenssh-serverRed HatDirectory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...4.3 Mediumopenssh-serverRed HatOpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with...7.5 High