Поиск уязвимостей
Количество 18
Количество 18
CVE-2015-5600
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
CVE-2015-5600
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
CVE-2015-5600
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
CVE-2015-5600
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH th ...
GHSA-6x25-gfx2-5crp
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
BDU:2022-07484
Уязвимость функции kbdint_next_device() службы sshd средства криптографической защиты OpenSSH, позволяющая нарушителю реализовать атаку методом «грубой силы» (brute force) или вызвать отказ в обслуживании
ROS-20261027-80-0010
Уязвимость openssh
ROS-20261027-73-0011
Уязвимость openssh
ELSA-2016-3531
ELSA-2016-3531: openssh security update (IMPORTANT)
ELSA-2016-0466
ELSA-2016-0466: openssh security update (MODERATE)
SUSE-SU-2015:1840-1
Security update for openssh
ELSA-2015-2088
ELSA-2015-2088: openssh security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2015:1695-1
Security update for openssh
SUSE-SU-2015:1581-1
Security update for openssh
SUSE-SU-2015:1544-1
Security update for openssh
ALT-PU-2016-1023
ALT-PU-2016-1023: package `openssh` update to version 7.1p1-alt1
ALT-PU-2024-3921
ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1
ALT-PU-2024-9513
ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2015-5600 The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. | CVSS3: 8.1 | 9% Низкий | больше 11 лет назад |
 | CVE-2015-5600 The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. | CVSS2: 4.3 | 9% Низкий | больше 11 лет назад |
 | CVE-2015-5600 The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. | CVSS3: 8.1 | 9% Низкий | больше 11 лет назад |
| CVE-2015-5600 The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH th ... | CVSS3: 8.1 | 9% Низкий | больше 11 лет назад |
| GHSA-6x25-gfx2-5crp The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. | CVSS3: 8.1 | 9% Низкий | больше 4 лет назад |
 | BDU:2022-07484 Уязвимость функции kbdint_next_device() службы sshd средства криптографической защиты OpenSSH, позволяющая нарушителю реализовать атаку методом «грубой силы» (brute force) или вызвать отказ в обслуживании | CVSS3: 8.2 | 9% Низкий | больше 11 лет назад |
 | ROS-20261027-80-0010 Уязвимость openssh | CVSS3: 8.2 | 9% Низкий | 17 дней назад |
| ROS-20261027-73-0011 Уязвимость openssh | CVSS3: 8.2 | 9% Низкий | 17 дней назад |
| ELSA-2016-3531 ELSA-2016-3531: openssh security update (IMPORTANT) | больше 10 лет назад | ||
| ELSA-2016-0466 ELSA-2016-0466: openssh security update (MODERATE) | больше 10 лет назад | ||
 | SUSE-SU-2015:1840-1 Security update for openssh | около 11 лет назад | ||
| ELSA-2015-2088 ELSA-2015-2088: openssh security, bug fix, and enhancement update (MODERATE) | почти 11 лет назад | ||
| SUSE-SU-2015:1695-1 Security update for openssh | около 11 лет назад | ||
| SUSE-SU-2015:1581-1 Security update for openssh | около 11 лет назад | ||
| SUSE-SU-2015:1544-1 Security update for openssh | около 11 лет назад | ||
| ALT-PU-2016-1023 ALT-PU-2016-1023: package `openssh` update to version 7.1p1-alt1 | CVSS3: 8.2 | почти 11 лет назад | |
| ALT-PU-2024-3921 ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2024-9513 ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost | CVSS3: 9.8 | больше 2 лет назад |
Уязвимостей на страницу