OpenSSH vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
87 matching records
- High7.0A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd).Patch nowKEVEPSS 27.93%Jul 8, 2024
- High8.1A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).Patch nowKEVEPSS 99.51%Jul 1, 2024
- High7.0OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_a…Check if you run itEPSS 0.66%Dec 24, 2023
- Medium6.5In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token…Check this weekEPSS 19.75%Dec 18, 2023
- Medium5.5In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incompletely applied.Check if you run itEPSS 0.43%Dec 18, 2023
- Medium5.9OpenBSD openssh Improper Validation of Integrity Check ValuePatch nowKEVEPSS 93.55%Dec 18, 2023
- Critical9.8OpenBSD openssh Unquoted Search Path or ElementPatch nowKEVEPSS 79.70%Jul 20, 2023
- Critical9.8ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints.Check if you run itEPSS 2.99%Mar 17, 2023
- Medium6.5OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.Check this weekEPSS 89.79%Feb 3, 2023
- Low3.7An issue was discovered in OpenSSH before 8.9.Check if you run itEPSS 1.68%Mar 13, 2022
- High7.0sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initializ…Check if you run itEPSS 2.54%Sep 26, 2021
- Medium5.3OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this…Check if you run itEPSS 5.33%Sep 15, 2021
- High7.1ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating…Check if you run itEPSS 3.51%Mar 5, 2021
- High7.4scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.Check this weekEPSS 13.68%Jul 24, 2020
- Medium5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation.Check if you run itEPSS 2.95%Jun 29, 2020
- High7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the…Check if you run itEPSS 2.23%Jun 1, 2020
- High7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured…Check if you run itEPSS 2.23%Oct 9, 2019
- Medium5.9An issue was discovered in OpenSSH 7.9.Patch nowKEVEPSS 58.20%Jan 31, 2019
- Medium6.8OpenBSD openssh Inappropriate Encoding for Output ContextPatch nowKEVEPSS 24.90%Jan 31, 2019
- Medium6.8An issue was discovered in OpenSSH 7.9.Patch nowKEVEPSS 3.81%Jan 31, 2019
- Medium5.3OpenBSD openssh Incorrect AuthorizationPatch nowKEVEPSS 3.68%Jan 10, 2019
- Medium5.3Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use.Check if you run itEPSS 3.51%Aug 28, 2018
- Medium5.3OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the r…Check this weekEPSS 98.67%Aug 17, 2018
- High7.5sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as…Check this weekEPSS 15.72%Jan 21, 2018
- Medium5.3The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.Check if you run itEPSS 3.36%Oct 26, 2017