Поиск уязвимостей
Количество 21
Количество 21
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user pa ...
GHSA-f525-65h3-3qjh
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
ELSA-2017-2563
ELSA-2017-2563: openssh security update (MODERATE)
BDU:2016-02237
Уязвимость сетевого протокола ssh, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным
openSUSE-SU-2016:2339-1
Security update for openssh
SUSE-SU-2016:2281-1
Security update for openssh
SUSE-SU-2016:2280-1
Security update for openssh
ROS-20261026-80-0103
Уязвимость openssh
ROS-20261026-73-0104
Уязвимость openssh
ELSA-2023-4428
ELSA-2023-4428: openssh security update (IMPORTANT)
SUSE-SU-2016:2555-1
Security update for openssh-openssl1
SUSE-SU-2016:2388-1
Security update for openssh
ELSA-2017-2029
ELSA-2017-2029: openssh security, bug fix, and enhancement update (MODERATE)
ALT-PU-2016-2124
ALT-PU-2016-2124: package `openssh` update to version 7.2p2-alt2
ALT-PU-2016-1200
ALT-PU-2016-1200: package `openssh` update to version 7.2p1-alt1
ALT-PU-2024-3921
ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.9 | 89% Высокий | больше 9 лет назад |
 | CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.3 | 89% Высокий | больше 10 лет назад |
 | CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.9 | 89% Высокий | больше 9 лет назад |
 | CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.9 | 89% Высокий | около 1 года назад |
| CVE-2016-6210 sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user pa ... | CVSS3: 5.9 | 89% Высокий | больше 9 лет назад |
| GHSA-f525-65h3-3qjh sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided. | CVSS3: 5.9 | 89% Высокий | больше 4 лет назад |
| ELSA-2017-2563 ELSA-2017-2563: openssh security update (MODERATE) | 89% Высокий | около 9 лет назад | |
 | BDU:2016-02237 Уязвимость сетевого протокола ssh, связанная с раскрытием информации, позволяющая нарушителю получить доступ к конфиденциальным данным | CVSS3: 5.9 | 89% Высокий | больше 10 лет назад |
 | openSUSE-SU-2016:2339-1 Security update for openssh | около 10 лет назад | ||
| SUSE-SU-2016:2281-1 Security update for openssh | около 10 лет назад | ||
| SUSE-SU-2016:2280-1 Security update for openssh | около 10 лет назад | ||
 | ROS-20261026-80-0103 Уязвимость openssh | CVSS3: 5.9 | 89% Высокий | 14 дней назад |
| ROS-20261026-73-0104 Уязвимость openssh | CVSS3: 5.9 | 89% Высокий | 14 дней назад |
| ELSA-2023-4428 ELSA-2023-4428: openssh security update (IMPORTANT) | около 3 лет назад | ||
| SUSE-SU-2016:2555-1 Security update for openssh-openssl1 | около 10 лет назад | ||
| SUSE-SU-2016:2388-1 Security update for openssh | около 10 лет назад | ||
| ELSA-2017-2029 ELSA-2017-2029: openssh security, bug fix, and enhancement update (MODERATE) | больше 9 лет назад | ||
| ALT-PU-2016-2124 ALT-PU-2016-2124: package `openssh` update to version 7.2p2-alt2 | CVSS3: 7.8 | около 10 лет назад | |
| ALT-PU-2016-1200 ALT-PU-2016-1200: package `openssh` update to version 7.2p1-alt1 | CVSS3: 9.8 | больше 10 лет назад | |
| ALT-PU-2024-3921 ALT-PU-2024-3921: package `openssh-gostcrypto` update to version 7.9p1-alt4.gost.p10.1 | CVSS3: 9.8 | больше 2 лет назад |
Уязвимостей на страницу