ssh vulnerabilities (TuxCare)
17 vulnerabilities.
-
sshTuxCare In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading... 2.5 Low -
sshTuxCare In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length... 6.5 Medium -
sshTuxCare In sshd in OpenSSH before 10.6, GSSAPIAuthentication authentication state can incorrectly be... 2.2 Low -
sshTuxCare In sshd in OpenSSH before 10.6, credentials can incorrectly persist after failure of a... 2.2 Low -
sshTuxCare In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be... 2.5 Low -
sshTuxCare In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of... 4.8 Medium -
sshTuxCare sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource... 3.7 Low -
sshTuxCare In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over... 5.9 Medium -
sshTuxCare OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios... 4.2 Medium -
sshTuxCare In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome... 7.5 High -
sshTuxCare Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... 2.7 Low -
sshTuxCare In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the... 4.3 Medium -
sshTuxCare Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 6.8 Medium -
sshTuxCare In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has... 6.5 Medium -
sshTuxCare Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
sshTuxCare The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search... 9.8 Critical -
sshTuxCare sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,... 7.0 High