Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2024-7269

Критический

ALT-PU-2024-7269: package openssh-gostcrypto update to version 9.6p1-alt1.gost

Источник
errata.altlinux.org
Дата публикации
29.04.2024
Дата обновления
04.02.2026
Устраненные уязвимости
12

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition

Описание

This update upgrades openssh-gostcrypto to version 9.6p1-alt1.gost.

Устраненные уязвимости12

Связанные уязвимости

CVSS3: 7.8
altlinux
больше 3 лет назад

ALT-PU-2023-4460: package `openssh` update to version 9.3p1-alt1

CVSS3: 5.3
ubuntu
около 5 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.9
redhat
почти 11 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
nvd
около 5 лет назад

OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product

CVSS3: 5.3
msrc
около 5 лет назад

OpenSSH through 8.7 allows remote attackers who have a suspicion that a certain combination of username and public key is known to an SSH server to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product