p PatchFirst

CVE-2014-2653

CVE-2014-2653

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.

CVSS 6.5 · Medium · EPSS 2.0% · Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • openssh Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:6.6p1-1

    Update to 1:6.6p1-1

  • openssh Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:6.6p1-1

    Update to 1:6.6p1-1

  • openssh Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:6.6p1-1

    Update to 1:6.6p1-1

Original sources

Check your server →