openssh vulnerabilities (Red Hat)
89 vulnerabilities.
opensshRed HatOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...5.3 MediumopensshRed Hatsshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer...7.5 HighopensshRed HatThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...5.3 MediumopensshRed HatThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH...7.8 HighopensshRed Hatauthfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on...5.5 MediumopensshRed HatUntrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...7.3 HighopensshRed HatThe auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password...7.5 HighopensshRed Hatsshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses...5.9 MediumopensshRed HatThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...7.8 HighopensshRed HatMultiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote...6.4 MediumopensshRed HatThe client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding...9.8 CriticalopensshRed HatThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...8.1 HighopensshRed HatThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...6.5 MediumopensshRed HatUse-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...6.9 MediumopensshRed HatThe monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous...1.9 LowopensshRed HatThe kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly...8.5 HighopensshRed HatThe x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted...4.3 MediumopensshRed HatThe OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a...4.0 MediumopensshRed HatThe verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows...5.8 MediumopensshRed Hatsshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...4.9 MediumopensshRed HatThe default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing...5.0 MediumopensshRed HatA certain Red Hat build of the pam_ssh_agent_auth module on Red Hat Enterprise Linux (RHEL) 6 and...6.2 MediumopensshRed HatThe ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...3.5 LowopensshRed HatA certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in...6.9 MediumopensshRed HatError handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through...2.6 LowopensshRed HatCertain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008...9.3 HighopensshRed HatOpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections...6.9 MediumopensshRed HatUnspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on...4.3 MediumopensshRed Hatssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and...7.5 HighopensshRed HatUnspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes...7.5 HighopensshRed HatUnspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...5.0 MediumopensshRed HatSignal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...8.1 HighopensshRed Hatsshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to...7.8 HighopensshRed Hatscp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain...4.6 MediumopensshRed Hatsshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials...5.0 MediumopensshRed HatSSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames,...1.2 LowopensshRed Hatsshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege...5.0 MediumopensshRed HatDirectory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...4.3 MediumopensshRed HatOpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with...7.5 High