openssh vulnerabilities (openSUSE)
43 vulnerabilities.
-
opensshopenSUSE ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a... 7.7 High -
opensshopenSUSE sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. 6.5 Medium -
opensshopenSUSE sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource... 3.7 Low -
opensshopenSUSE In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over... 5.9 Medium -
opensshopenSUSE sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior:... 4.8 Medium -
opensshopenSUSE internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments,... 4.2 Medium -
opensshopenSUSE scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when... 4.2 Medium -
opensshopenSUSE sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when ... 4.2 Medium -
opensshopenSUSE OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios... 4.2 Medium -
opensshopenSUSE OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions. 2.5 Low -
opensshopenSUSE In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome... 7.5 High -
opensshopenSUSE Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This... 2.7 Low -
opensshopenSUSE ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to... 3.6 Low -
opensshopenSUSE ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain... 3.6 Low -
opensshopenSUSE In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the... 4.3 Medium -
opensshopenSUSE Openssh: denial-of-service in openssh 5.9 Medium -
opensshopenSUSE Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled 6.8 Medium -
opensshopenSUSE OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password... 7.5 High -
opensshopenSUSE Openssh: regresshion - race condition in ssh allows rce/dos 8.1 High -
opensshopenSUSE In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has... 6.5 Medium -
opensshopenSUSE Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
opensshopenSUSE The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search... 9.8 Critical -
opensshopenSUSE RSA implementation bug in AVX512IFMA instructions 9.8 Critical -
opensshopenSUSE sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used,... 7.0 High -
opensshopenSUSE ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common... 7.1 High -
opensshopenSUSE The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an... 5.9 Medium -
opensshopenSUSE In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a... 6.8 Medium -
opensshopenSUSE An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp... 5.9 Medium -
opensshopenSUSE An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display... 6.8 Medium -
opensshopenSUSE In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access... 5.3 Medium -
opensshopenSUSE The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH... 7.8 High -
opensshopenSUSE authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on... 5.5 Medium -
opensshopenSUSE sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain... 7.0 High -
opensshopenSUSE Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows... 7.3 High -
opensshopenSUSE ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows... 7.5 High -
opensshopenSUSE The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password... 7.5 High -
opensshopenSUSE sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses... 5.9 Medium -
opensshopenSUSE The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin... 7.8 High -
opensshopenSUSE The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH... 8.1 High -
opensshopenSUSE The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7... 6.5 Medium -
opensshopenSUSE OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections... 6.9 Medium -
opensshopenSUSE ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and... 7.5 High -
opensshopenSUSE scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain... 4.6 Medium