Skip to contentOpenbsd vulnerabilities
Newest
- openbsdOpenBSD 6.6, in a non-default configuration where S/Key or YubiKey authentication is enabled,...CVE-2019-195227.8 High
- openbsd openssh, netapp cloud backup, steelstore cloud integrated storage +5 more +7 moreOpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a...CVE-2019-16905Fix available7.8 High
- openbsdReuven Plevinsky and Tal Vainshtein of Check Point Software Technologies Ltd. discovered that...CVE-2019-84607.5 High
- openbsd openssh, netapp element software, ontap select deploy +7 more +9 moreIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...CVE-2019-6110Public exploitEPSS 24.9%6.8 Medium
- openbsd openssh, apache mina sshd, canonical ubuntu linux +19 more +21 moreAn issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp...CVE-2019-6111Public exploitFix availableEPSS 58.2%5.9 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +20 more +22 moreAn issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...CVE-2019-6109Fix available6.8 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreIn OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access...CVE-2018-20685Fix available5.3 Medium
- openbsd openssh, netapp cloud backup, cn1610 firmware +3 more +5 moreRemotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote...CVE-2018-15919Fix available5.3 Medium
- openbsd openssh, canonical ubuntu linux, debian linux +19 more +21 moreOpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for...CVE-2018-15473Public exploitFix availableEPSS 98.7%5.3 Medium
- openbsdtss_alloc in sys/arch/i386/i386/gdt.c in OpenBSD 6.2 and 6.3 has a Local Denial of Service ...CVE-2018-147755.5 Medium
- openbsd libresslLibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory-cache side-channel attack on DSA and...CVE-2018-124344.7 Medium
- openbsd libresslThe int_x509_param_set_hosts function in lib/libcrypto/x509/x509_vpm.c in LibreSSL 2.7.0 before 2...CVE-2018-8970Public exploit7.4 High
- openbsd openssh, canonical ubuntu linux, debian linux +9 more +11 moresshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer...CVE-2016-10708Public exploitFix availableEPSS 15.7%7.5 High
- openbsd openssh, debian linux, netapp active iq unified manager +18 more +20 moreThe process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write...CVE-2017-15906Fix available5.3 Medium
- openbsd opensmtpd, fedoraproject fedora +1 moreUse-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial...CVE-2015-7687Fix available9.8 Critical
- openbsdThe OpenBSD qsort() function is recursive, and not randomized, an attacker can construct a...CVE-2017-1000373Public exploitEPSS 13.4%6.5 Medium
- openbsdA flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass...CVE-2017-10003729.8 Critical
- openbsd libresslLibreSSL 2.5.1 to 2.5.3 lacks TLS certificate verification if SSL_get_verify_result is relied...CVE-2017-8301Fix available5.3 Medium
- openbsdhttpd in OpenBSD allows remote attackers to cause a denial of service (memory consumption) via a...CVE-2017-5850Public exploitEPSS 17.2%7.5 High
- openbsdInteger overflow in the uvm_map_isavail function in uvm/uvm_map.c in OpenBSD 5.9 allows local...CVE-2016-65225.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and...CVE-2016-63505.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service (kernel panic) by...CVE-2016-62475.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows certain local users with kern.usermount privileges to cause a denial...CVE-2016-62464.4 Medium
- openbsdOpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a large...CVE-2016-62455.5 Medium
- openbsdthrsleep in kern/kern_synch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of...CVE-2016-62435.5 Medium
- openbsdOpenBSD 5.8 and 5.9 allows local users to cause a denial of service (assertion failure and kernel...CVE-2016-62425.5 Medium
- openbsdInteger overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute...CVE-2016-62417.8 High
- openbsdInteger truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to...CVE-2016-62407.8 High
- openbsdThe mmap extension __MAP_NOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of...CVE-2016-62395.5 Medium
- openbsdThe sys_thrsigdivert function in kern/kern_sig.c in the OpenBSD kernel 5.9 allows remote...CVE-2016-62447.5 High
- openbsd opensshThe shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH...CVE-2016-10012Fix available7.8 High
- openbsd opensshauthfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on...CVE-2016-10011Fix available5.5 Medium
- openbsd opensshsshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain...CVE-2016-10010Public exploitFix available7.0 High
- openbsd opensshUntrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...CVE-2016-10009Public exploitFix availableEPSS 37.4%7.3 High
- openbsd openssh** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows...CVE-2016-8858Public exploitFix availableDisputedEPSS 29.5%7.5 High
- openbsd openssh, fedoraproject fedora +1 moreThe auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password...CVE-2016-6515Public exploitFix availableEPSS 58.6%7.5 High
- openbsd opensshsshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses...CVE-2016-6210Public exploitFix availableEPSS 88.9%5.9 Medium
- openbsd openssh, canonical ubuntu core, ubuntu linux +2 more +4 moreThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...CVE-2015-8325Fix available7.8 High
- openbsd openssh, oracle vm server +1 moreMultiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote...CVE-2016-3115Public exploitFix availableEPSS 35.5%6.4 Medium
- openbsd opensshThe ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to...CVE-2016-1907Fix availableEPSS 14.3%5.3 Medium
- openbsd openssh, debian linux, redhat enterprise linux desktop +5 more +7 moreThe client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding...CVE-2016-1908Fix availableEPSS 13.7%9.8 Critical
- openbsd openssh, apple mac os x, hp virtual customer access system +3 more +5 moreThe (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH...CVE-2016-0778Fix availableEPSS 20.9%8.1 High
- openbsd openssh, apple mac os x, hp remote device access virtual customer access system +3 more +5 moreThe resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7...CVE-2016-0777Public exploitFix availableEPSS 63.5%6.5 Medium
- openbsd opensshsshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local...CVE-2015-6565Public exploit7.2 High
- openbsd opensshUse-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in...CVE-2015-6564Fix available6.9 Medium
- openbsd openssh, apple mac os x +1 moreThe monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous...CVE-2015-6563Fix available1.9 Low
- openbsd opensshThe kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly...CVE-2015-5600Public exploitFix available8.5 High
- openbsd opensshThe x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted...CVE-2015-5352Fix available4.3 Medium
- openbsd libresslDouble free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in...CVE-2014-94247.5 High
- bsd, freebsd, netbsd +1 more +3 moreThe TCP stack in 4.3BSD Net/2, as used in FreeBSD 5.4, NetBSD possibly 2.0, and OpenBSD possibly...CVE-2014-72505.0 Medium
- Show moreLoading…