Количество 14
Количество 14
BDU:2021-03492
Уязвимость функции toremote средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольную команду
ROS-20241017-03
Уязвимость openssh
ALT-PU-2021-4855
ALT-PU-2021-4855: package `openssh-gostcrypto` update to version 8.6p1-alt1.gost
ALT-PU-2021-2395
ALT-PU-2021-2395: package `openssh` update to version 8.6p1-alt1
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVE-2020-15778
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c tor ...
RLSA-2024:3166
Moderate: openssh security update
GHSA-cvxm-8hgf-6m6m
scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
ELSA-2024-3166
ELSA-2024-3166: openssh security update (MODERATE)
ALT-PU-2024-3921
ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1
ALT-PU-2024-9513
ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2021-03492 Уязвимость функции toremote средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольную команду | CVSS3: 8.8 | 13% Средний | около 6 лет назад |
 | ROS-20241017-03 Уязвимость openssh | CVSS3: 8.8 | 13% Средний | почти 2 года назад |
 | ALT-PU-2021-4855 ALT-PU-2021-4855: package `openssh-gostcrypto` update to version 8.6p1-alt1.gost | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2021-2395 ALT-PU-2021-2395: package `openssh` update to version 8.6p1-alt1 | CVSS3: 8.8 | около 5 лет назад | |
 | CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | CVSS3: 7.4 | 13% Средний | около 6 лет назад |
 | CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | CVSS3: 4.1 | 13% Средний | около 6 лет назад |
| CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | CVSS3: 7.4 | 13% Средний | около 6 лет назад |
 | CVSS3: 7.8 | 13% Средний | около 6 лет назад | |
| CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c tor ... | CVSS3: 7.4 | 13% Средний | около 6 лет назад |
 | RLSA-2024:3166 Moderate: openssh security update | 13% Средний | больше 1 года назад | |
| GHSA-cvxm-8hgf-6m6m scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | CVSS3: 7.8 | 13% Средний | больше 4 лет назад |
| ELSA-2024-3166 ELSA-2024-3166: openssh security update (MODERATE) | 13% Средний | больше 2 лет назад | |
| ALT-PU-2024-3921 ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2024-9513 ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost | CVSS3: 9.8 | около 2 лет назад |
Уязвимостей на страницу