Vulnerabilidades do Openbsd Openssh
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Openbsd Openssh: 54 registro(s), com versões afetadas e correções.cpe:2.3:a:openbsd:openssh
CVE-2019-6110
Média · 6.8
Exploit público CWE-838 31/01/2019
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a...
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
CVE-2019-6109
Média · 6.8
CWE-116 31/01/2019
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display...
An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.
CVE-2016-10009
Alta · 7.3
CWE-426 05/01/2017
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows...
Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
CVE-2006-5051
Alta · 8.1
CWE-415 27/09/2006
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of...
Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.