CVE Browser

openssh: OpenSSH: Tunnel forwarding restriction bypass

openssh: OpenSSH: Information disclosure and data corruption via use-after-free in ssh client

openssh: OpenSSH: ssh-agent allows remote execution of local operations

openssh: OpenSSH: Use-after-free vulnerability during host key re-exchange on the client side

openssh: OpenSSH: Brute-force attacks facilitated due to insufficient authentication delay

openssh: OpenSSH: Denial of Service via excessive GSSAPI authentication attempts

openssh: OpenSSH sshd: Security bypass due to incorrect handling of forwarding and tunneling options

openssh: OpenSSH: Undocumented GSSAPIStrictAcceptorCheck behavior impacts security in Windows Active Directory

openssh: OpenSSH: SFTP security bypass due to command-line argument parsing flaw

openssh: OpenSSH: `scp` file misplacement vulnerability during remote copy

openssh: OpenSSH: sftp client allows attacker to control downloaded file location

Openssh: heap out-of-bounds read in red hat enterprise linux versions of openssh gssapi indicator cleanup due to missing null sentinel termination

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of servi…

OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option

OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions

OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage

OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username

OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode

openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables

openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand

openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand

openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding

Openssh: denial-of-service in openssh

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled