Skip to contentOpenbsd Openssh vulnerabilities
- openbsd opensshUnspecified vulnerability in the linux_audit_record_event function in OpenSSH 4.3p2, as used on...CVE-2007-31024.3 Medium
- openbsd opensshssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and...CVE-2007-4752Fix available7.5 High
- cisco webns, openbsd openssh, teamf1 sshield +2 moreUnspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco...CVE-2007-46545.0 Medium
- openbsd openssh, netapp hci management node, hci storage node +2 more +4 moreOpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to...CVE-2007-2768Fix available4.3 Medium
- openbsd opensshOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers...CVE-2007-22435.0 Medium
- openbsd opensshUnspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes...CVE-2006-5794Fix available7.5 High
- openbsd opensshOpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under...CVE-2006-5229Public exploitEPSS 58.9%2.6 Low
- openbsd opensshpacket.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by...CVE-2006-4925Fix availableEPSS 15.0%5.0 Medium
- openbsd opensshUnspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows...CVE-2006-5052Fix available5.0 Medium
- openbsd openssh, apple mac os x, mac os x server +1 more +3 moreSignal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...CVE-2006-5051Public exploitFix availableEPSS 45.6%8.1 High
- openbsd opensshsshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to...CVE-2006-4924Public exploitFix availableEPSS 38.1%7.8 High
- freebsd, openbsd openssh +1 moreOpenSSH on FreeBSD 5.3 and 5.4, when used with OpenPAM, does not properly handle when a forked...CVE-2006-0883Fix available5.0 Medium
- openbsd opensshscp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain...CVE-2006-0225Fix available4.6 Medium
- openbsd opensshsshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials...CVE-2005-2798Fix available5.0 Medium
- openbsd opensshOpenSSH 4.0, and other versions before 4.2, does not properly handle dynamic port forwarding ("-D...CVE-2005-2797Fix available5.0 Medium
- openbsd opensshSSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames,...CVE-2005-2666Fix available1.2 Low
- openbsd opensshsshd in OpenSSH 3.5p1, when PermitRootLogin is disabled, immediately closes the TCP connection...CVE-2004-2760Fix available6.8 Medium
- openbsd opensshsshd.c in OpenSSH 3.6.1p2 and 3.7.1p2 and possibly other versions, when using privilege...CVE-2004-2069Fix available5.0 Medium
- openbsd opensshThe default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote...CVE-2004-1653EPSS 11.3%6.4 Medium
- openbsd opensshDirectory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers...CVE-2004-0175Fix available4.3 Medium
- openbsd opensshsshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard...CVE-2003-1562Fix available7.6 High
- openbsd opensshThe PAM conversation function in OpenSSH 3.7.1 and 3.7.1p1 interprets an array of structures as...CVE-2003-0787Fix available7.5 High
- openbsd opensshThe SSH1 PAM challenge response authentication in OpenSSH 3.7.1 and 3.7.1p1, when Privilege...CVE-2003-0786Fix available10.0 High
- openbsd opensshMultiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial...CVE-2003-0695Fix available7.5 High
- openbsd opensshA "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow...CVE-2003-0693Fix availableEPSS 11.4%10.0 High
- openbsd openssh"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of...CVE-2003-0682Fix available7.5 High
- openbsd opensshOpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with...CVE-2003-0386Fix available7.5 High
- openbsd openssh, openpkg, siemens scalance x204rna ecc firmware +1 more +3 moreOpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an...CVE-2003-0190Public exploitFix availableEPSS 76.8%5.0 Medium
- openbsd openssh, openbsd +1 moresshd in OpenSSH 3.2.2, when using YP with netgroups and under certain conditions, may allow users...CVE-2002-0765Fix available7.5 High
- openbsd opensshBuffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute...CVE-2002-0640Public exploitFix availableEPSS 28.2%10.0 High
- openbsd opensshInteger overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute...CVE-2002-0639Fix availableEPSS 18.3%9.8 Critical
- openbsd opensshBuffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and...CVE-2002-0575Public exploit7.5 High
- openbsd openssh, conectiva linux, engardelinux secure linux +5 more +7 moreOff-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote...CVE-2002-0083Public exploitEPSS 14.7%9.8 Critical
- openbsd opensshSSH protocol 2 (aka SSH-2) public key authentication in the development snapshot of OpenSSH 2.3.1...CVE-2001-15856.8 Medium
- openbsd opensshOpenSSH before 3.0.1 with Kerberos V enabled does not properly authenticate users, which could...CVE-2001-1507Fix available7.5 High
- openbsd openssh, redhat linux +1 moreOpenSSH 3.0.1 and earlier with UseLogin enabled does not properly cleanse critical environment...CVE-2001-08727.2 High
- openbsd opensshOpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows...CVE-2001-08167.5 High
- openbsd opensshOpenSSH before 2.9.9, while using keypairs and multiple keys of different types in the ~/.ssh...CVE-2001-13807.5 High
- openbsd opensshThe "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an...CVE-2001-13825.0 Medium
- freebsd, openbsd openssh +1 morelibutil in OpenSSH on FreeBSD 4.4 and earlier does not drop privileges before verifying the...CVE-2001-1029Public exploit2.1 Low
- openbsd opensshOpenSSH version 2.9 and earlier, with X forwarding enabled, allows a local attacker to delete any...CVE-2001-05297.2 High
- openbsd openssh, ssh +1 moreThe SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various...CVE-2001-05727.5 High
- openbsd openssh, ssh +1 moreImplementations of SSH version 1.5, including (1) OpenSSH up to version 2.3.0, (2) AppGate, and ...CVE-2001-03614.0 Medium
- openbsd opensshOpenSSH 2.9 and earlier does not initiate a Pluggable Authentication Module (PAM) session if...CVE-2001-1459Fix available7.5 High
- ssh, openbsd openssh +1 moreCORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary...CVE-2001-0144Public exploitEPSS 32.4%10.0 High
- openbsd opensshOpenSSH SSH client before 2.3.0 does not properly disable X11 or agent forwarding, which could...CVE-2000-11697.5 High
- ssh, openbsd openssh +1 moreDirectory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to...CVE-2000-0992Public exploitFix available5.0 Medium
- openbsd opensshFormat string vulnerabilities in OpenBSD ssh program (and possibly other BSD-based operating...CVE-2000-0999EPSS 11.9%10.0 High
- openbsd opensshOpenSSH does not properly drop privileges when the UseLogin option is enabled, which allows local...CVE-2000-052510.0 High
- ssh, openbsd openssh, ssh ssh2 +2 moreThe default configuration of SSH allows X forwarding, which could allow a remote attacker to...CVE-2000-02175.1 Medium
- Show moreLoading…