p PatchFirst

PatchFirst · Latest vulnerabilities

openssh vulnerabilities

Vulnerabilities published for openssh in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 12

  1. CVE-2019-6111

    Medium · CVSS 5.9EPSS 58.2%Public exploitFix available

    CVE-2019-6111

    An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).

    opensshOperating systems Network services
    • Update to 1:7.2p2-4ubuntu2.8
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2019-6109

    Medium · CVSS 6.8EPSS 3.81%Fix available

    CVE-2019-6109

    An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.

    opensshOperating systems Network services
    • Update to 1:7.2p2-4ubuntu2.7
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. CVE-2018-15473

    Medium · CVSS 5.9EPSS 98.67%Public exploitFix available

    CVE-2018-15473

    OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.

    opensshOperating systems Network services
    • Update to 1:7.2p2-4ubuntu2.6
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  7. CVE-2016-6210

    Medium · CVSS 5.9EPSS 88.94%Public exploitFix available

    CVE-2016-6210

    sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.

    opensshOperating systems Network services
    • Update to 1:7.2p2-4ubuntu2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  8. CVE-2016-10012

    High · CVSS 7.8EPSS 1.28%Fix available

    CVE-2016-10012

    The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enforced by all compilers, which might allows local users to gain privileges by leveraging access to a sandboxed privilege-separation process, related to the m_zback and m_zlib data structures.

    opensshOperating systems Network services
    • Update to 1:7.2p2-4ubuntu2.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →