Количество 36
Количество 36
ELSA-2016-0741
ELSA-2016-0741: openssh security, bug fix, and enhancement update (MODERATE)
SUSE-SU-2015:1695-1
Security update for openssh
SUSE-SU-2015:1581-1
Security update for openssh
SUSE-SU-2015:1544-1
Security update for openssh
CVE-2016-1908
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
CVE-2016-1908
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
CVE-2016-1908
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
CVE-2016-1908
The client in OpenSSH before 7.2 mishandles failed cookie generation f ...
ELSA-2015-2088
ELSA-2015-2088: openssh security, bug fix, and enhancement update (MODERATE)
GHSA-mgwc-m57j-46w8
The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
BDU:2017-01263
Уязвимость клиента средства криптографической защиты OpenSSH, позволяющая нарушителю получить доверенные права при взаимодействии с X11-сервером
ELSA-2016-0465
ELSA-2016-0465: openssh security update (MODERATE)
CVE-2015-6563
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
CVE-2015-6563
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
CVE-2015-6563
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
CVE-2015-6563
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD pla ...
openSUSE-SU-2016:1455-1
Security update for openssh
SUSE-SU-2016:1528-1
Security update for openssh
SUSE-SU-2016:1386-1
Security update for openssh
SUSE-SU-2016:2555-1
Security update for openssh-openssl1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ELSA-2016-0741 ELSA-2016-0741: openssh security, bug fix, and enhancement update (MODERATE) | больше 9 лет назад | ||
 | SUSE-SU-2015:1695-1 Security update for openssh | почти 10 лет назад | ||
| SUSE-SU-2015:1581-1 Security update for openssh | почти 10 лет назад | ||
| SUSE-SU-2015:1544-1 Security update for openssh | почти 10 лет назад | ||
 | CVE-2016-1908 The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server. | CVSS3: 9.8 | 5% Низкий | больше 8 лет назад |
 | CVE-2016-1908 The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server. | CVSS2: 4.9 | 5% Низкий | больше 9 лет назад |
 | CVE-2016-1908 The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server. | CVSS3: 9.8 | 5% Низкий | больше 8 лет назад |
| CVE-2016-1908 The client in OpenSSH before 7.2 mishandles failed cookie generation f ... | CVSS3: 9.8 | 5% Низкий | больше 8 лет назад |
| ELSA-2015-2088 ELSA-2015-2088: openssh security, bug fix, and enhancement update (MODERATE) | почти 10 лет назад | ||
| GHSA-mgwc-m57j-46w8 The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server. | CVSS3: 9.8 | 5% Низкий | больше 3 лет назад |
 | BDU:2017-01263 Уязвимость клиента средства криптографической защиты OpenSSH, позволяющая нарушителю получить доверенные права при взаимодействии с X11-сервером | CVSS2: 7.5 | 5% Низкий | больше 8 лет назад |
| ELSA-2016-0465 ELSA-2016-0465: openssh security update (MODERATE) | больше 9 лет назад | ||
| CVE-2015-6563 The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. | CVSS2: 1.9 | 0% Низкий | около 10 лет назад |
| CVE-2015-6563 The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. | CVSS2: 6.2 | 0% Низкий | около 10 лет назад |
| CVE-2015-6563 The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. | CVSS2: 1.9 | 0% Низкий | около 10 лет назад |
| CVE-2015-6563 The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD pla ... | CVSS2: 1.9 | 0% Низкий | около 10 лет назад |
| openSUSE-SU-2016:1455-1 Security update for openssh | больше 9 лет назад | ||
| SUSE-SU-2016:1528-1 Security update for openssh | около 9 лет назад | ||
| SUSE-SU-2016:1386-1 Security update for openssh | больше 9 лет назад | ||
| SUSE-SU-2016:2555-1 Security update for openssh-openssl1 | почти 9 лет назад |
Уязвимостей на страницу