Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.EPSS 0.2%Oct 7, 2026
- Medium6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly compressed data.EPSS 0.2%Oct 6, 2026
- Medium6.1A flaw was found in OpenSSH.EPSS 0.1%Jun 23, 2026
- Medium6.5A flaw was found in OpenSSH.EPSS 0.7%Jun 23, 2026
- Medium4.3In OpenBSD through 7.8, the slaacd and rad daemons have an infinite loop when they receive a crafted ICMPv6 Neighbor Discovery (ND) option (over a local network) with…Apr 21, 2026
- High8.1OpenSSH before 10.3 mishandles the authorized_keys principals option in uncommon scenarios involving a principals list in conjunction with a Certificate Authority that…Apr 2, 2026
- Low2.5OpenSSH before 10.3 omits connection multiplexing confirmation for proxy-mode multiplexing sessions.Apr 2, 2026
- Medium6.5OpenSSH before 10.3 can use unintended ECDSA algorithms.Apr 2, 2026
- High8.1In OpenSSH before 10.3, command execution can occur via shell metacharacters in a username within a command line.Apr 2, 2026
- High8.1In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as ro…Apr 2, 2026
- Medium4.5bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm.Mar 24, 2026
- Low3.8In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.EPSS 0.2%Apr 10, 2025
- Medium5.9A flaw was found in the OpenSSH package.EPSS 40.6%Feb 28, 2025
- High7.0OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_a…EPSS 0.7%Dec 24, 2023
- Medium6.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token…EPSS 19.8%Dec 18, 2023
- Medium5.5In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.EPSS 0.4%Dec 18, 2023
- Medium5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such tha…EPSS 93.5%Dec 18, 2023
- Critical9.8The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…EPSS 79.7%Jul 20, 2023
- Critical9.8ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints.EPSS 3.0%Mar 17, 2023
- Medium6.5OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.EPSS 89.7%Feb 3, 2023
- High7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initializ…EPSS 2.5%Sep 26, 2021
- High7.1ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating…EPSS 3.5%Mar 5, 2021
- High7.4scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.EPSS 13.7%Jul 24, 2020
- Medium5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation.EPSS 2.9%Jun 29, 2020
- High7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the…EPSS 2.2%Jun 1, 2020
30 records · page 1 of 2
PreviousNext