openssh-sk-dummy vulnerabilities (TuxCare)
29 vulnerabilities.
openssh-sk-dummyTuxCareIn ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading...2.5 Lowopenssh-sk-dummyTuxCareIn sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes...3.6 Lowopenssh-sk-dummyTuxCareIn sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be...2.5 Lowopenssh-sk-dummyTuxCareIn sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length...6.5 Mediumopenssh-sk-dummyTuxCareIn ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because...2.5 Lowopenssh-sk-dummyTuxCareIn sshd and ssh in OpenSSH before 10.6, an LZ77 dictionary coder can be used even though this is...3.7 Lowopenssh-sk-dummyTuxCareIn sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be...2.2 Lowopenssh-sk-dummyTuxCareIn sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a...2.2 Lowopenssh-sk-dummyTuxCareIn sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be...4.2 Mediumopenssh-sk-dummyTuxCareIn sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be...2.5 Lowopenssh-sk-dummyTuxCareIn ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of...4.8 Mediumopenssh-sk-dummyTuxCaressh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a...7.7 Highopenssh-sk-dummyTuxCaresshd in OpenSSH before 10.4 does not always honor the minimum authentication delay.6.5 Mediumopenssh-sk-dummyTuxCaresshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:...4.8 Mediumopenssh-sk-dummyTuxCareOpenssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions5.0 Mediumopenssh-sk-dummyTuxCareOpenssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service4.3 Mediumopenssh-sk-dummyTuxCareOpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios...4.2 Mediumopenssh-sk-dummyTuxCareOpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.2.5 Lowopenssh-sk-dummyTuxCareOpenSSH before 10.3 can use unintended ECDSA algorithms. Listing of any ECDSA algorithm in...3.1 Lowopenssh-sk-dummyTuxCareIn OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome...7.5 Highopenssh-sk-dummyTuxCareVulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This...2.7 Lowopenssh-sk-dummyTuxCaressh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to...3.6 Lowopenssh-sk-dummyTuxCaressh in OpenSSH before 10.1 allows control characters in usernames that originate from certain...3.6 Lowopenssh-sk-dummyTuxCareIn sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the...4.3 Mediumopenssh-sk-dummyTuxCareOpenssh: machine-in-the-middle attack if verifyhostkeydns is enabled6.8 Mediumopenssh-sk-dummyTuxCareOpenssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 97.0 Highopenssh-sk-dummyTuxCareOpenssh: regresshion - race condition in ssh allows rce/dos8.1 Highopenssh-sk-dummyTuxCareIn ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has...6.5 Mediumopenssh-sk-dummyTuxCarePrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Medium