Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3A flaw was found in OpenSSH.EPSS 0.3%Oct 15, 2026
- Medium5.4A flaw was found in OpenSSH.EPSS 0.2%Oct 15, 2026
- Medium6.5A flaw was found in OpenSSH.EPSS 0.3%Oct 15, 2026
- Medium6.1A flaw was found in OpenSSH.EPSS 0.1%Jun 23, 2026
- Medium6.5A flaw was found in OpenSSH.EPSS 0.7%Jun 23, 2026
- Medium6.9Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.EPSS 1.3%Mar 12, 2026
- Low3.6ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.EPSS 0.1%Oct 6, 2025
- Low3.8In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding.EPSS 0.2%Apr 10, 2025
- Medium5.9A flaw was found in the OpenSSH package.EPSS 40.6%Feb 28, 2025
- High7.0A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).EPSS 27.9%Jul 8, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).EPSS 99.5%Jul 1, 2024
- High7.0OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_a…EPSS 0.7%Dec 24, 2023
- Medium6.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token…EPSS 19.8%Dec 18, 2023
- Medium5.5In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.EPSS 0.4%Dec 18, 2023
- Medium5.9The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such tha…EPSS 93.5%Dec 18, 2023
- Critical9.8The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an…EPSS 79.7%Jul 20, 2023
- Critical9.8ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints.EPSS 3.0%Mar 17, 2023
- Medium6.5OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.EPSS 89.7%Feb 3, 2023
- High7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initializ…EPSS 2.5%Sep 26, 2021
- High7.1ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating…EPSS 3.5%Mar 5, 2021
- High7.4scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.EPSS 13.7%Jul 24, 2020
- Medium5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation.EPSS 2.9%Jun 29, 2020
- High7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the…EPSS 2.2%Jun 1, 2020
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…EPSS 2.2%Oct 9, 2019
- Medium5.9An issue was discovered in OpenSSH 7.9.EPSS 58.2%Jan 31, 2019
27 records · page 1 of 2
PreviousNext