OpenSSH vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
87 matching records
- Critical9.8The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, whic…Check this weekEPSS 13.74%Apr 11, 2017
- Medium5.9sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, whic…Check this weekEPSS 88.94%Feb 13, 2017
- High7.8The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compile…Check if you run itEPSS 1.28%Jan 5, 2017
- Medium6.2authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive privat…Check if you run itEPSS 1.10%Jan 5, 2017
- High7.0sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via…Check if you run itEPSS 4.24%Jan 5, 2017
- High7.3Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging…Check this weekEPSS 37.43%Jan 5, 2017
- High7.5The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many du…Check this weekEPSS 29.46%Dec 9, 2016
- UnknownOpenSSH 'AllowTcpForwarding' Port Bounce VulnerabilityPatch nowKEVEPSS 11.27%Oct 12, 2016
- High7.5The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which allows remote attackers to…Check this weekEPSS 58.57%Aug 7, 2016
- Medium6.4Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via…Check this weekEPSS 35.53%Mar 22, 2016
- UnknownOpenBSD openssh Improper Input ValidationPatch nowKEVEPSS 2.37%Aug 22, 2008
- UnknownOpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the existence of user accounts by attempting to authenticate via S/KECheck if you run itEPSS 2.40%Apr 25, 2007