cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2023-48795,https://securityvulnerability.io/vulnerability/CVE-2023-48795,OpenSSH vulnerability allows remote attackers to bypass integrity checks and downgrade security features,"The vulnerability in the SSH transport protocol with specific OpenSSH extensions may allow remote attackers to circumvent integrity checks, leading to the omission of some packets during the extension negotiation phase. Consequently, a client and server may establish a connection where certain security features are either downgraded or disabled, allowing for effective attacks against the protocol's security mechanisms such as ChaCha20-Poly1305 and CBC with Encrypt-then-MAC. The issue originates from improper handling of the handshake phase and sequence numbers within the SSH Binary Packet Protocol (BPP), opening various SSH implementations to potential exploitation.",OpenBSD,Openssh,5.9,MEDIUM,0.9548299908638,false,true,false,false,,true,false,2023-12-18T00:00:00.000Z,0 CVE-2023-51385,https://securityvulnerability.io/vulnerability/CVE-2023-51385,OS Command Injection Vulnerability in OpenSSH Before 9.6,"In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.",OpenBSD,Openssh,6.5,MEDIUM,0.0034099998883903027,false,true,false,true,true,false,false,2023-12-18T00:00:00.000Z,0 CVE-2023-51384,https://securityvulnerability.io/vulnerability/CVE-2023-51384,Incomplete Destination Constraints in OpenSSH Affecting Key Management,"In OpenSSH versions prior to 9.6, a vulnerability exists within the ssh-agent related to the handling of destination constraints during the addition of PKCS#11-hosted private keys. The issue arises when these constraints are specified; they are only applied to the first added key, leading to potential security risks if multiple keys reside on the PKCS#11 token. This incomplete enforcement of constraints emphasizes the need for users to review their key management processes and update to the latest version of OpenSSH to mitigate associated risks.",OpenBSD,Openssh,5.5,MEDIUM,0.0004299999854993075,false,true,false,false,,false,false,2023-12-18T00:00:00.000Z,0 CVE-2023-38408,https://securityvulnerability.io/vulnerability/CVE-2023-38408,Remote Code Execution Vulnerability in OpenSSH's ssh-agent Feature,"The ssh-agent feature in OpenSSH versions prior to 9.3p2 is susceptible to a vulnerability due to an insufficiently trusted search path. This flaw allows for remote code execution when an ssh-agent is forwarded to an attacker-controlled environment. The vulnerability stems from a legacy issue that was not thoroughly addressed in previous security updates, exposing users to potential exploitation through agent forwarding mechanisms.",OpenBSD,Openssh,9.8,CRITICAL,0.04293999820947647,false,false,false,true,true,false,false,2023-07-20T03:15:00.000Z,0 CVE-2023-28531,https://securityvulnerability.io/vulnerability/CVE-2023-28531,Smartcard Key Management Vulnerability in OpenSSH by OpenBSD,"A security flaw exists in OpenSSH versions prior to 9.3, where the ssh-add tool inadvertently adds smartcard keys to the ssh-agent without enforcing the necessary per-hop destination constraints. This weakness allows for potential unauthorized access to sensitive resources by failing to properly limit the context in which keys are added. Users operating on affected versions should assess their security stance and consider implementing available mitigations.",OpenBSD,Openssh,9.8,CRITICAL,0.0015300000086426735,false,false,false,false,,false,false,2023-03-17T04:15:00.000Z,0 CVE-2021-36368,https://securityvulnerability.io/vulnerability/CVE-2021-36368,,"An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwarding but without -oLogLevel=verbose, and an attacker has silently modified the server to support the None authentication option, then the user cannot determine whether FIDO authentication is going to confirm that the user wishes to connect to that server, or that the user wishes to allow that server to connect to a different server on the user's behalf. NOTE: the vendor's position is ""this is not an authentication bypass, since nothing is being bypassed.",OpenBSD,Openssh,3.7,LOW,0.00494999997317791,false,false,false,false,,false,false,2022-03-13T00:15:00.000Z,0 CVE-2021-41617,https://securityvulnerability.io/vulnerability/CVE-2021-41617,,"sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user.",OpenBSD,Openssh,7,HIGH,0.0005000000237487257,false,false,false,false,,false,false,2021-09-26T00:00:00.000Z,0 CVE-2016-20012,https://securityvulnerability.io/vulnerability/CVE-2016-20012,,"OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and public key is known to an SSH server, to test whether this suspicion is correct. This occurs because a challenge is sent only when that combination could be valid for a login session. NOTE: the vendor does not recognize user enumeration as a vulnerability for this product",OpenBSD,Openssh,5.3,MEDIUM,0.005239999853074551,false,false,false,false,,false,false,2021-09-15T19:32:11.000Z,0 CVE-2021-28041,https://securityvulnerability.io/vulnerability/CVE-2021-28041,,"ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.",OpenBSD,Openssh,7.1,HIGH,0.0028200000524520874,false,false,false,false,,false,false,2021-03-05T19:07:34.000Z,0 CVE-2020-15778,https://securityvulnerability.io/vulnerability/CVE-2020-15778,,"scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated that they intentionally omit validation of ""anomalous argument transfers"" because that could ""stand a great chance of breaking existing workflows.""",OpenBSD,Openssh,7.8,HIGH,0.005869999993592501,false,false,false,true,true,false,false,2020-07-24T00:00:00.000Z,0 CVE-2020-14145,https://securityvulnerability.io/vulnerability/CVE-2020-14145,,The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.,OpenBSD,Openssh,5.9,MEDIUM,0.0023300000466406345,false,false,false,false,,false,false,2020-06-29T17:33:36.000Z,0 CVE-2020-12062,https://securityvulnerability.io/vulnerability/CVE-2020-12062,,"The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client's download directory by creating a crafted subdirectory anywhere on the remote server. The victim must use the command scp -rp to download a file hierarchy containing, anywhere inside, this crafted subdirectory. NOTE: the vendor points out that ""this attack can achieve no more than a hostile peer is already able to achieve within the scp protocol"" and ""utimes does not fail under normal circumstances.",OpenBSD,Openssh,7.5,HIGH,0.00139999995008111,false,false,false,false,,false,false,2020-06-01T15:28:36.000Z,0 CVE-2019-16905,https://securityvulnerability.io/vulnerability/CVE-2019-16905,,"OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH.",OpenBSD,Openssh,7.8,HIGH,0.0005300000193528831,false,false,false,false,,false,false,2019-10-09T00:00:00.000Z,0 CVE-2019-6109,https://securityvulnerability.io/vulnerability/CVE-2019-6109,,"An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client output, e.g., by using ANSI control codes to hide additional files being transferred. This affects refresh_progress_meter() in progressmeter.c.",OpenBSD,"Openssh,Winscp",6.8,MEDIUM,0.002259999979287386,false,false,false,false,,false,false,2019-01-31T00:00:00.000Z,0 CVE-2019-6111,https://securityvulnerability.io/vulnerability/CVE-2019-6111,,"An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the scp client only performs cursory validation of the object name returned (only directory traversal attacks are prevented). A malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as well (for example, to overwrite the .ssh/authorized_keys file).",OpenBSD,"Openssh,Winscp",5.9,MEDIUM,0.0022899999748915434,false,false,false,true,true,false,false,2019-01-31T00:00:00.000Z,0 CVE-2019-6110,https://securityvulnerability.io/vulnerability/CVE-2019-6110,,"In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.",OpenBSD,"Openssh,Winscp",6.8,MEDIUM,0.004019999876618385,false,false,false,false,,false,false,2019-01-31T00:00:00.000Z,0 CVE-2018-20685,https://securityvulnerability.io/vulnerability/CVE-2018-20685,,"In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via the filename of . or an empty filename. The impact is modifying the permissions of the target directory on the client side.",OpenBSD,"Openssh,Winscp",5.3,MEDIUM,0.003220000071451068,false,false,false,false,,false,false,2019-01-10T00:00:00.000Z,0 CVE-2018-15919,https://securityvulnerability.io/vulnerability/CVE-2018-15919,,"Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or ""oracle"") as a vulnerability.'",OpenBSD,Openssh,5.3,MEDIUM,0.0029299999587237835,false,false,false,false,,false,false,2018-08-28T08:00:00.000Z,0 CVE-2018-15473,https://securityvulnerability.io/vulnerability/CVE-2018-15473,,"OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.",OpenBSD,Openssh,5.3,MEDIUM,0.033149998635053635,false,false,false,true,true,false,false,2018-08-17T00:00:00.000Z,0 CVE-2016-10708,https://securityvulnerability.io/vulnerability/CVE-2016-10708,,"sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.",OpenBSD,Openssh,7.5,HIGH,0.12780000269412994,false,false,false,false,,false,false,2018-01-21T22:00:00.000Z,0 CVE-2017-15906,https://securityvulnerability.io/vulnerability/CVE-2017-15906,,"The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files.",OpenBSD,Openssh,5.3,MEDIUM,0.0035699999425560236,false,false,false,false,,false,false,2017-10-26T00:00:00.000Z,0 CVE-2016-1908,https://securityvulnerability.io/vulnerability/CVE-2016-1908,,"The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.",OpenBSD,Openssh,9.8,CRITICAL,0.007860000245273113,false,false,false,false,,false,false,2017-04-11T00:00:00.000Z,0 CVE-2016-6210,https://securityvulnerability.io/vulnerability/CVE-2016-6210,,"sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.",OpenBSD,Openssh,5.9,MEDIUM,0.06883999705314636,false,false,false,true,true,false,false,2017-02-13T00:00:00.000Z,0 CVE-2016-10009,https://securityvulnerability.io/vulnerability/CVE-2016-10009,,Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.,OpenBSD,Openssh,7.3,HIGH,0.034129999577999115,false,false,false,false,,false,false,2017-01-05T00:00:00.000Z,0 CVE-2016-10011,https://securityvulnerability.io/vulnerability/CVE-2016-10011,,"authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.",OpenBSD,Openssh,5.5,MEDIUM,0.0004199999966658652,false,false,false,false,,false,false,2017-01-05T00:00:00.000Z,0