Поиск уязвимостей
Количество 26
Количество 26
BDU:2023-03950
Уязвимость функции PKCS#11 компонента ssh-agent средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольный код
ROS-20261027-80-0091
Уязвимость openssh
ROS-20240212-01
Уязвимость OpenSSH
ALT-PU-2023-8784
ALT-PU-2023-8784: package `openssh` update to version 9.3p2-alt1
ALT-PU-2023-4480
ALT-PU-2023-4480: package `openquantumsafe-openssh` update to version 8.9p1.202306-alt2
ALT-PU-2023-4471
ALT-PU-2023-4471: package `openssh` update to version 7.9p1-alt4.p10.2
ALT-PU-2024-7269
ALT-PU-2024-7269: package `openssh-gostcrypto` update to version 9.6p1-alt1.gost
CVE-2023-38408
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVE-2023-38408
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVE-2023-38408
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVE-2023-38408
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVE-2023-38408
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insuff ...
SUSE-SU-2023:2950-1
Security update for openssh
SUSE-SU-2023:2947-1
Security update for openssh
SUSE-SU-2023:2946-1
Security update for openssh
SUSE-SU-2023:2945-1
Security update for openssh
SUSE-SU-2023:2940-1
Security update for openssh
RLSA-2023:4419
Important: openssh security update
GHSA-px36-p9hv-7h2v
The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
ELSA-2023-4419
ELSA-2023-4419: openssh security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-03950 Уязвимость функции PKCS#11 компонента ssh-agent средства криптографической защиты OpenSSH, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
 | ROS-20261027-80-0091 Уязвимость openssh | CVSS3: 9.8 | 80% Высокий | 13 дней назад |
| ROS-20240212-01 Уязвимость OpenSSH | CVSS3: 9.8 | 80% Высокий | больше 2 лет назад |
| ALT-PU-2023-8784 ALT-PU-2023-8784: package `openssh` update to version 9.3p2-alt1 | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
| ALT-PU-2023-4480 ALT-PU-2023-4480: package `openquantumsafe-openssh` update to version 8.9p1.202306-alt2 | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
| ALT-PU-2023-4471 ALT-PU-2023-4471: package `openssh` update to version 7.9p1-alt4.p10.2 | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
| ALT-PU-2024-7269 ALT-PU-2024-7269: package `openssh-gostcrypto` update to version 9.6p1-alt1.gost | CVSS3: 9.8 | больше 2 лет назад | |
 | CVE-2023-38408 The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
 | CVE-2023-38408 The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
 | CVE-2023-38408 The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
 | CVE-2023-38408 The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
| CVE-2023-38408 The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insuff ... | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
 | SUSE-SU-2023:2950-1 Security update for openssh | 80% Высокий | больше 3 лет назад | |
| SUSE-SU-2023:2947-1 Security update for openssh | 80% Высокий | больше 3 лет назад | |
| SUSE-SU-2023:2946-1 Security update for openssh | 80% Высокий | больше 3 лет назад | |
| SUSE-SU-2023:2945-1 Security update for openssh | 80% Высокий | больше 3 лет назад | |
| SUSE-SU-2023:2940-1 Security update for openssh | 80% Высокий | больше 3 лет назад | |
 | RLSA-2023:4419 Important: openssh security update | 80% Высокий | больше 3 лет назад | |
| GHSA-px36-p9hv-7h2v The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009. | CVSS3: 9.8 | 80% Высокий | больше 3 лет назад |
| ELSA-2023-4419 ELSA-2023-4419: openssh security update (IMPORTANT) | 80% Высокий | больше 3 лет назад |
Уязвимостей на страницу