Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9998-pmcc-vpg5

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call.

ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call.

EPSS

Процентиль: 20%
0.00064
Низкий

Дефекты

CWE-200

Связанные уязвимости

ubuntu
около 12 лет назад

ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call.

redhat
почти 15 лет назад

ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call.

nvd
около 12 лет назад

ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allows local users to obtain sensitive key information via the ptrace system call.

debian
около 12 лет назад

ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platfo ...

EPSS

Процентиль: 20%
0.00064
Низкий

Дефекты

CWE-200