Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2023-4460

Высокий

ALT-PU-2023-4460: package openssh update to version 9.3p1-alt1

Источник
errata.altlinux.org
Дата публикации
18.07.2023
Дата обновления
04.02.2026
Устраненные уязвимости
6

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades openssh to version 9.3p1-alt1.

Устраненные уязвимости6

Связанные уязвимости

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2024-7269: package `openssh-gostcrypto` update to version 9.6p1-alt1.gost

CVSS3: 5.3
ubuntu
около 5 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.9
redhat
почти 11 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
nvd
около 5 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
msrc
около 5 лет назад

OpenSSH through 8.7 allows remote attackers who have a suspicion that a certain combination of username and public key is known to an SSH server to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product