Поиск уязвимостей
Количество 51
Количество 51
CVE-2016-8858
The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through ...
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user pa ...
ALT-PU-2024-3921
ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1
ALT-PU-2024-9513
ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost
GHSA-cfx4-r6f2-m2mc
** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
BDU:2016-02352
Уязвимость средства криптографической защиты OpenSSH, позволяющая нарушителю вызвать отказ в обслуживании
GHSA-f525-65h3-3qjh
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
ELSA-2017-2563
ELSA-2017-2563: openssh security update (MODERATE)
BDU:2016-02237
Уязвимость сетевого протокола ssh, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным
ROS-20261028-80-0001
Уязвимость openssh
ROS-20261028-73-0002
Уязвимость openssh
openSUSE-SU-2016:2339-1
Security update for openssh
SUSE-SU-2016:2281-1
Security update for openssh
SUSE-SU-2016:2280-1
Security update for openssh
ROS-20261026-80-0103
Уязвимость openssh
ROS-20261026-73-0104
Уязвимость openssh
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2016-8858 The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through ... | CVSS3: 7.5 | 29% Средний | почти 10 лет назад |
 | CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.9 | 89% Высокий | больше 9 лет назад |
 | CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.3 | 89% Высокий | больше 10 лет назад |
 | CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.9 | 89% Высокий | больше 9 лет назад |
 | CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.9 | 89% Высокий | около 1 года назад |
| CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user pa ... | CVSS3: 5.9 | 89% Высокий | больше 9 лет назад |
| ALT-PU-2024-3921 ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2024-9513 ALT-PU-2024-9513: package `openssh-gostcrypto` update to version 9.6p1-alt2.gost | CVSS3: 9.8 | больше 2 лет назад | |
| GHSA-cfx4-r6f2-m2mc ** DISPUTED ** The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue." | CVSS3: 7.5 | 29% Средний | больше 4 лет назад |
 | BDU:2016-02352 Уязвимость средства криптографической защиты OpenSSH, позволяющая нарушителю вызвать отказ в обслуживании | CVSS2: 7.8 | 29% Средний | почти 10 лет назад |
| GHSA-f525-65h3-3qjh sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.9 | 89% Высокий | больше 4 лет назад |
| ELSA-2017-2563 ELSA-2017-2563: openssh security update (MODERATE) | 89% Высокий | около 9 лет назад | |
| BDU:2016-02237 Уязвимость сетевого протокола ssh, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 5.9 | 89% Высокий | больше 10 лет назад |
 | ROS-20261028-80-0001 Уязвимость openssh | CVSS3: 7.5 | 29% Средний | 13 дней назад |
| ROS-20261028-73-0002 Уязвимость openssh | CVSS3: 7.5 | 29% Средний | 13 дней назад |
 | openSUSE-SU-2016:2339-1 Security update for openssh | около 10 лет назад | ||
| SUSE-SU-2016:2281-1 Security update for openssh | около 10 лет назад | ||
| SUSE-SU-2016:2280-1 Security update for openssh | около 10 лет назад | ||
| ROS-20261026-80-0103 Уязвимость openssh | CVSS3: 5.9 | 89% Высокий | 15 дней назад |
| ROS-20261026-73-0104 Уязвимость openssh | CVSS3: 5.9 | 89% Высокий | 15 дней назад |
Уязвимостей на страницу