openssh-cavs vulnerabilities (TuxCare)
24 vulnerabilities.
openssh-cavsTuxCareIn ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading...2.5 Lowopenssh-cavsTuxCareIn sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length...6.5 Mediumopenssh-cavsTuxCareIn sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be...2.2 Lowopenssh-cavsTuxCareIn sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a...2.2 Lowopenssh-cavsTuxCareIn ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of...4.8 Mediumopenssh-cavsTuxCareUpdate of opensshNo scoreopenssh-cavsTuxCareUpdate of opensshNo scoreopenssh-cavsTuxCareUpdate of opensshNo scoreopenssh-cavsTuxCaresshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource...3.7 Lowopenssh-cavsTuxCareIn sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...5.9 Mediumopenssh-cavsTuxCareOpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios...4.2 Mediumopenssh-cavsTuxCareIn OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within...3.6 Lowopenssh-cavsTuxCareIn OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome...7.5 Highopenssh-cavsTuxCareVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...2.7 Lowopenssh-cavsTuxCaressh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to...3.6 Lowopenssh-cavsTuxCareIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...4.3 Mediumopenssh-cavsTuxCareOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabled6.8 Mediumopenssh-cavsTuxCareIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...6.5 Mediumopenssh-cavsTuxCarePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumopenssh-cavsTuxCareThe PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search...9.8 Criticalopenssh-cavsTuxCaresshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,...7.0 Highopenssh-cavsTuxCareAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...5.9 Mediumopenssh-cavsTuxCareAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...6.8 Mediumopenssh-cavsTuxCareIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...5.3 Medium