openssh-askpass-gnome vulnerabilities (SUSE)
53 vulnerabilities.
openssh-askpass-gnomeSUSEIn sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...2.5 Lowopenssh-askpass-gnomeSUSEIn ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of...4.8 Mediumopenssh-askpass-gnomeSUSEIn ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to...3.5 Lowopenssh-askpass-gnomeSUSEssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a...7.7 Highopenssh-askpass-gnomeSUSEsshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.6.5 Mediumopenssh-askpass-gnomeSUSEsshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource...3.7 Lowopenssh-askpass-gnomeSUSEIn sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...5.9 Mediumopenssh-askpass-gnomeSUSEsshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...4.8 Mediumopenssh-askpass-gnomeSUSEinternal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,...4.2 Mediumopenssh-askpass-gnomeSUSEscp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when...4.2 Mediumopenssh-askpass-gnomeSUSEsftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ...4.2 Mediumopenssh-askpass-gnomeSUSEOpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios...4.2 Mediumopenssh-askpass-gnomeSUSEOpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.2.5 Lowopenssh-askpass-gnomeSUSEIn OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome...7.5 Highopenssh-askpass-gnomeSUSEVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...2.7 Lowopenssh-askpass-gnomeSUSEssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to...3.6 Lowopenssh-askpass-gnomeSUSEssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...3.6 Lowopenssh-askpass-gnomeSUSEIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...4.3 Mediumopenssh-askpass-gnomeSUSEOpenssh: denial-of-service in openssh5.9 Mediumopenssh-askpass-gnomeSUSEOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabled6.8 Mediumopenssh-askpass-gnomeSUSEOpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password...7.5 Highopenssh-askpass-gnomeSUSEOpenssh: regresshion - race condition in ssh allows rce/dos8.1 Highopenssh-askpass-gnomeSUSEIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...6.5 Mediumopenssh-askpass-gnomeSUSEPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumopenssh-askpass-gnomeSUSEThe PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search...9.8 Criticalopenssh-askpass-gnomeSUSEsshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,...7.0 Highopenssh-askpass-gnomeSUSEssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common...7.1 Highopenssh-askpass-gnomeSUSEThe client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...5.9 Mediumopenssh-askpass-gnomeSUSEIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...6.8 Mediumopenssh-askpass-gnomeSUSEAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...5.9 Mediumopenssh-askpass-gnomeSUSEAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...6.8 Mediumopenssh-askpass-gnomeSUSEIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...5.3 Mediumopenssh-askpass-gnomeSUSEOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...5.3 Mediumopenssh-askpass-gnomeSUSEsshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer...7.5 Highopenssh-askpass-gnomeSUSEThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...5.3 Mediumopenssh-askpass-gnomeSUSEThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH...7.8 Highopenssh-askpass-gnomeSUSEauthfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on...5.5 Mediumopenssh-askpass-gnomeSUSEsshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain...7.0 Highopenssh-askpass-gnomeSUSEUntrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...7.3 Highopenssh-askpass-gnomeSUSE** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows...7.5 Highopenssh-askpass-gnomeSUSEThe auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password...7.5 Highopenssh-askpass-gnomeSUSEsshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses...5.9 Mediumopenssh-askpass-gnomeSUSEThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...7.8 Highopenssh-askpass-gnomeSUSEMultiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote...6.4 Mediumopenssh-askpass-gnomeSUSEThe client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding...9.8 Criticalopenssh-askpass-gnomeSUSEThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...8.1 Highopenssh-askpass-gnomeSUSEThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...6.5 Mediumopenssh-askpass-gnomeSUSEUse-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...6.9 Mediumopenssh-askpass-gnomeSUSEThe monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous...1.9 Lowopenssh-askpass-gnomeSUSEThe kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly...8.5 High- Show olderLoading…