Skip to contentOpenbsd Openssh vulnerabilities
- openbsd openssh, broadcom fabric operating system, netapp a700s firmware +9 more +11 morescp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated...CVE-2020-15778Public exploitFix availableDisputedEPSS 13.7%7.4 High
- openbsd openssh, netapp active iq unified manager, aff a700s firmware +9 more +11 moreThe client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an...CVE-2020-14145Fix available5.9 Medium
- openbsd openssh, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp, simatic s7-1500 cpu 1518f-4 pn/dp mfp +1 more +3 more** DISPUTED ** The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server...CVE-2020-12062Fix availableDisputed7.5 High
- openbsd openssh, netapp cloud backup, steelstore cloud integrated storage +5 more +7 moreOpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a...CVE-2019-16905Fix available7.8 High
- openbsd openssh, netapp element software, ontap select deploy +7 more +9 moreIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...CVE-2019-6110Public exploitEPSS 24.9%6.8 Medium
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...CVE-2019-6111Public exploitFix availableEPSS 58.2%5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...CVE-2019-6109Fix available6.8 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...CVE-2018-20685Fix available5.3 Medium
- openbsd openssh, netapp cloud backup, cn1610 firmware +3 more +5 moreRemotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote...CVE-2018-15919Fix available5.3 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...CVE-2018-15473Public exploitFix availableEPSS 98.7%5.3 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moresshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer...CVE-2016-10708Public exploitFix availableEPSS 15.7%7.5 High
- openbsd openssh, debian linux, netapp active iq unified manager +18 more +20 moreThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...CVE-2017-15906Fix available5.3 Medium
- openbsd opensshThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH...CVE-2016-10012Fix available7.8 High
- openbsd opensshauthfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on...CVE-2016-10011Fix available5.5 Medium
- openbsd opensshsshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain...CVE-2016-10010Public exploitFix available7.0 High
- openbsd opensshUntrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...CVE-2016-10009Public exploitFix availableEPSS 37.4%7.3 High
- openbsd openssh** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows...CVE-2016-8858Public exploitFix availableDisputedEPSS 29.5%7.5 High
- openbsd openssh, fedoraproject fedora +1 moreThe auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password...CVE-2016-6515Public exploitFix availableEPSS 58.6%7.5 High
- openbsd opensshsshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses...CVE-2016-6210Public exploitFix availableEPSS 88.9%5.9 Medium
- openbsd openssh, canonical ubuntu core, ubuntu linux +2 more +4 moreThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...CVE-2015-8325Fix available7.8 High
- openbsd openssh, oracle vm server +1 moreMultiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote...CVE-2016-3115Public exploitFix availableEPSS 35.5%6.4 Medium
- openbsd opensshThe ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to...CVE-2016-1907Fix availableEPSS 14.3%5.3 Medium
- openbsd openssh, debian linux, redhat enterprise linux desktop +5 more +7 moreThe client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding...CVE-2016-1908Fix availableEPSS 13.7%9.8 Critical
- openbsd openssh, apple mac os x, hp virtual customer access system +3 more +5 moreThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...CVE-2016-0778Fix availableEPSS 20.9%8.1 High
- openbsd openssh, apple mac os x, hp remote device access virtual customer access system +3 more +5 moreThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...CVE-2016-0777Public exploitFix availableEPSS 63.5%6.5 Medium
- openbsd opensshsshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local...CVE-2015-6565Public exploit7.2 High
- openbsd opensshUse-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...CVE-2015-6564Fix available6.9 Medium
- openbsd openssh, apple mac os x +1 moreThe monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous...CVE-2015-6563Fix available1.9 Low
- openbsd opensshThe kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly...CVE-2015-5600Public exploitFix available8.5 High
- openbsd opensshThe x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted...CVE-2015-5352Fix available4.3 Medium
- openbsd opensshThe OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a...CVE-2014-92784.0 Medium
- openbsd opensshThe verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows...CVE-2014-2653Fix available5.8 Medium
- openbsd openssh, oracle communications user data repository +1 moresshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config,...CVE-2014-2532Fix available4.9 Medium
- openbsd opensshssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand...CVE-2011-43272.1 Low
- openbsd opensshThe hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to...CVE-2014-16927.5 High
- openbsd opensshThe mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES...CVE-2013-4548Fix available6.0 Medium
- openbsd opensshThe default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing...CVE-2010-5107Fix availableEPSS 16.9%5.0 Medium
- openbsd opensshThe ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with...CVE-2011-5000Fix available3.5 Low
- openbsd opensshThe auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug...CVE-2012-0814Fix available3.5 Low
- freebsd, netbsd, openbsd +1 more +3 moreThe (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH...CVE-2010-47554.0 Medium
- openbsd opensshThe key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy...CVE-2011-0539Fix available5.0 Medium
- openbsd opensshOpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters...CVE-2010-44787.5 High
- openbsd opensshA certain Red Hat modification to the ChrootDirectory feature in OpenSSH 4.8, as used in sshd in...CVE-2009-2904Fix available6.9 Medium
- openbsd openssh, ssh tectia client, tectia connector +2 more +4 moreError handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through...CVE-2008-5161Public exploitFix availableEPSS 18.6%2.6 Low
- openbsd opensshA certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny;...CVE-2008-4109Public exploitFix availableEPSS 28.6%5.0 Medium
- openbsd opensshCertain Red Hat Enterprise Linux (RHEL) 4 and 5 packages for OpenSSH, as signed in August 2008...CVE-2008-38449.3 High
- openbsd opensshOpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration...CVE-2008-32591.2 Low
- openbsd opensshsshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapshot, allows remote...CVE-2008-3234Public exploit6.5 Medium
- openbsd opensshOpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config...CVE-2008-1657Fix available6.5 Medium
- openbsd opensshOpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections...CVE-2008-1483Fix available6.9 Medium
- Show moreLoading…