Поиск уязвимостей
Количество 32
Количество 32
ALT-PU-2021-4855
ALT-PU-2021-4855: package `openssh-gostcrypto` update to version 8.6p1-alt1.gost
ALT-PU-2021-2395
ALT-PU-2021-2395: package `openssh` update to version 8.6p1-alt1
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
CVE-2020-15778
CVE-2020-15778
scp in OpenSSH through 8.3p1 allows command injection in the scp.c tor ...
CVE-2020-14145
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
CVE-2020-14145
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
CVE-2020-14145
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
CVE-2020-14145
CVE-2020-14145
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepan ...
RLSA-2024:3166
Moderate: openssh security update
GHSA-cvxm-8hgf-6m6m
scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows."
ELSA-2024-3166
ELSA-2024-3166: openssh security update (MODERATE)
BDU:2021-03492
Уязвимость функции toremote средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольную команду
openSUSE-SU-2020:2298-1
Security update for openssh
openSUSE-SU-2020:2240-1
Security update for openssh
SUSE-SU-2021:0022-1
Security update for openssh
SUSE-SU-2020:3882-1
Security update for openssh
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-4855 ALT-PU-2021-4855: package `openssh-gostcrypto` update to version 8.6p1-alt1.gost | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2021-2395 ALT-PU-2021-2395: package `openssh` update to version 8.6p1-alt1 | CVSS3: 8.8 | больше 5 лет назад | |
 | CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | CVSS3: 7.4 | 14% Средний | больше 6 лет назад |
 | CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | CVSS3: 4.1 | 14% Средний | больше 6 лет назад |
 | CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | CVSS3: 7.4 | 14% Средний | больше 6 лет назад |
 | CVSS3: 7.8 | 14% Средний | около 6 лет назад | |
| CVE-2020-15778 scp in OpenSSH through 8.3p1 allows command injection in the scp.c tor ... | CVSS3: 7.4 | 14% Средний | больше 6 лет назад |
| CVE-2020-14145 The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected. | CVSS3: 5.9 | 3% Низкий | больше 6 лет назад |
| CVE-2020-14145 The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected. | CVSS3: 5.9 | 3% Низкий | больше 6 лет назад |
| CVE-2020-14145 The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected. | CVSS3: 5.9 | 3% Низкий | больше 6 лет назад |
| CVSS3: 5.9 | 3% Низкий | около 6 лет назад | |
| CVE-2020-14145 The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepan ... | CVSS3: 5.9 | 3% Низкий | больше 6 лет назад |
 | RLSA-2024:3166 Moderate: openssh security update | 14% Средний | больше 1 года назад | |
| GHSA-cvxm-8hgf-6m6m scp in OpenSSH through 8.3p1 allows command injection in scp.c remote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of "anomalous argument transfers" because that could "stand a great chance of breaking existing workflows." | CVSS3: 7.8 | 14% Средний | больше 4 лет назад |
| ELSA-2024-3166 ELSA-2024-3166: openssh security update (MODERATE) | 14% Средний | больше 2 лет назад | |
 | BDU:2021-03492 Уязвимость функции toremote средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольную команду | CVSS3: 8.8 | 14% Средний | больше 6 лет назад |
 | openSUSE-SU-2020:2298-1 Security update for openssh | 3% Низкий | почти 6 лет назад | |
| openSUSE-SU-2020:2240-1 Security update for openssh | 3% Низкий | почти 6 лет назад | |
| SUSE-SU-2021:0022-1 Security update for openssh | 3% Низкий | почти 6 лет назад | |
| SUSE-SU-2020:3882-1 Security update for openssh | 3% Низкий | почти 6 лет назад |
Уязвимостей на страницу