K000160938: OpenSSH vulnerabilities CVE-2019-16905 and CVE-2020-12062

🗓️ 21 Apr 2026 22:19:36Reported by f5Type

f5🔗 my.f5.com👁 9 Views

OpenSSH vulnerabilities expose pre-auth overflow with xmss keys and scp utimes file overwrite risk; no F5 products are affected.

Reporter	Title	Published	Views	Family All 144
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in OpenSSH affects IBM Watson Studio Local	20 Dec 201913:54	–	ibm
AstraLinux	Astra Linux – Vulnerability in OpenSSH	19 Jun 202611:10	–	astralinux
GithubExploit	Exploit for Race Condition in Openbsd Openssh	13 Sep 202501:46	–	githubexploit
BDU FSTEC	The vulnerability of the OpenSSH cryptographic protection implementation arises from a possible integer overflow, allowing an attacker to execute arbitrary code.	6 Jul 202100:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the client-side SCP mechanism in OpenSSH, which arises due to insufficient validation of input data, allows attackers to overwrite arbitrary files in the client’s download directory.	8 Jul 202100:00	–	bdu_fstec
CBLMariner	CVE-2019-16905 affecting package openssh 8.0p1-13	5 Nov 202004:21	–	cbl_mariner
Circl	CVE-2019-16905	12 Sep 202209:43	–	circl
Circl	CVE-2020-12062	1 Apr 202508:49	–	circl
CNVD	OpenSSH Input Validation Error Vulnerability	2 Jun 202000:00	–	cnvd
CVE	CVE-2019-16905	9 Oct 201900:00	–	cve