Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such tha…EPSS 93.5%Dec 18, 2023
- Critical9.8The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…EPSS 79.7%Jul 20, 2023
- Critical9.8ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints.EPSS 3.0%Mar 17, 2023
- Medium6.5OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.EPSS 89.7%Feb 3, 2023
- High7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initializ…EPSS 2.5%Sep 26, 2021
- High7.1ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating…EPSS 3.5%Mar 5, 2021
- High7.4scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.EPSS 13.7%Jul 24, 2020
- Medium5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation.EPSS 2.9%Jun 29, 2020
- High7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the…EPSS 2.2%Jun 1, 2020
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…EPSS 2.2%Oct 9, 2019
- Medium5.9An issue was discovered in OpenSSH 7.9.EPSS 58.2%Jan 31, 2019
- Medium6.8In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client o…EPSS 24.9%Jan 31, 2019
- Medium6.8An issue was discovered in OpenSSH 7.9.EPSS 3.8%Jan 31, 2019
38 records · page 2 of 2
PreviousNext