Поиск уязвимостей
Количество 46
Количество 46
ALT-PU-2024-7261
ALT-PU-2024-7261: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.2
ALT-PU-2024-7257
ALT-PU-2024-7257: package `openssh` update to version 7.9p1-alt4.p10.5
ALT-PU-2024-7269
ALT-PU-2024-7269: package `openssh-gostcrypto` update to version 9.6p1-alt1.gost
CVE-2023-51385
In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
CVE-2023-51385
In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
CVE-2023-51385
In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
CVE-2023-51385
In ssh in OpenSSH before 9.6 OS command injection might occur if a user name or host name has shell metacharacters and this name is referenced by an expansion token in certain situations. For example an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
CVE-2023-51385
In ssh in OpenSSH before 9.6, OS command injection might occur if a us ...
CVE-2021-41617
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.
CVE-2021-41617
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.
CVE-2021-41617
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.
CVE-2021-41617
sshd in OpenSSH 6.2 through 8.x before 8.8 when certain non-default configurations are used allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process if the configuration specifies running the command as a different user.
CVE-2021-41617
sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default c ...
SUSE-SU-2024:0604-1
Security update for openssh
SUSE-SU-2024:0603-1
Security update for openssh
SUSE-SU-2024:0596-1
Security update for openssh
GHSA-5mq4-x9g5-4vc4
In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.
BDU:2023-08955
Уязвимость cредства криптографической защиты OpenSSH, связанная с внедрением или модификацией аргумента, позволяющая нарушителю выполнить произвольные команды
openSUSE-SU-2021:3950-1
Security update for openssh
SUSE-SU-2022:0805-1
Security update for openssh
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2024-7261 ALT-PU-2024-7261: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.2 | CVSS3: 7.8 | больше 2 лет назад | |
| ALT-PU-2024-7257 ALT-PU-2024-7257: package `openssh` update to version 7.9p1-alt4.p10.5 | CVSS3: 7.8 | больше 2 лет назад | |
| ALT-PU-2024-7269 ALT-PU-2024-7269: package `openssh-gostcrypto` update to version 9.6p1-alt1.gost | CVSS3: 9.8 | больше 2 лет назад | |
 | CVE-2023-51385 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name. | CVSS3: 6.5 | 20% Средний | почти 3 года назад |
 | CVE-2023-51385 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name. | CVSS3: 6.5 | 20% Средний | почти 3 года назад |
 | CVE-2023-51385 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name. | CVSS3: 6.5 | 20% Средний | почти 3 года назад |
 | CVE-2023-51385 In ssh in OpenSSH before 9.6 OS command injection might occur if a user name or host name has shell metacharacters and this name is referenced by an expansion token in certain situations. For example an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name. | CVSS3: 6.5 | 20% Средний | 9 месяцев назад |
| CVE-2023-51385 In ssh in OpenSSH before 9.6, OS command injection might occur if a us ... | CVSS3: 6.5 | 20% Средний | почти 3 года назад |
| CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. | CVSS3: 7 | 3% Низкий | около 5 лет назад |
| CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. | CVSS3: 7 | 3% Низкий | около 5 лет назад |
| CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. | CVSS3: 7 | 3% Низкий | около 5 лет назад |
| CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8 when certain non-default configurations are used allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process if the configuration specifies running the command as a different user. | CVSS3: 7 | 3% Низкий | около 5 лет назад |
| CVE-2021-41617 sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default c ... | CVSS3: 7 | 3% Низкий | около 5 лет назад |
 | SUSE-SU-2024:0604-1 Security update for openssh | 20% Средний | больше 2 лет назад | |
| SUSE-SU-2024:0603-1 Security update for openssh | 20% Средний | больше 2 лет назад | |
| SUSE-SU-2024:0596-1 Security update for openssh | 20% Средний | больше 2 лет назад | |
| GHSA-5mq4-x9g5-4vc4 In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name. | CVSS3: 9.8 | 20% Средний | почти 3 года назад |
 | BDU:2023-08955 Уязвимость cредства криптографической защиты OpenSSH, связанная с внедрением или модификацией аргумента, позволяющая нарушителю выполнить произвольные команды | CVSS3: 6.3 | 20% Средний | почти 3 года назад |
| openSUSE-SU-2021:3950-1 Security update for openssh | 3% Низкий | почти 5 лет назад | |
| SUSE-SU-2022:0805-1 Security update for openssh | 3% Низкий | больше 4 лет назад |
Уязвимостей на страницу