Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pw45-4wv8-37wm

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.

The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.

EPSS

Процентиль: 95%
0.0761
Низкий

Связанные уязвимости

nvd
около 25 лет назад

The "echo simulation" traffic analysis countermeasure in OpenSSH before 2.9.9p2 sends an additional echo packet after the password and carriage return is entered, which could allow remote attackers to determine that the countermeasure is being used.

redos
18 дней назад

Уязвимость openssh

redos
18 дней назад

Уязвимость openssh

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1

CVSS3: 9.8
altlinux
больше 2 лет назад

ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost

EPSS

Процентиль: 95%
0.0761
Низкий