Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-56r6-6mmg-25j5

Опубликовано: 08 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.2

Описание

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

EPSS

Процентиль: 7%
0.00175
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-1284

Связанные уязвимости

CVSS3: 4.2
ubuntu
25 дней назад

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

CVSS3: 5.4
redhat
25 дней назад

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

CVSS3: 4.2
nvd
25 дней назад

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

CVSS3: 4.2
msrc
24 дня назад

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection.

CVSS3: 4.2
debian
25 дней назад

internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first ...

EPSS

Процентиль: 7%
0.00175
Низкий

4.2 Medium

CVSS3

Дефекты

CWE-1284