8.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:P/I:N/A:C
0.164 Low
EPSS
Percentile
95.9%
OpenSSH is a complete SSH protocol implementation that includes an SFTP client and server support.
Multiple vulnerabilities have been discovered in OpenSSH. Please review the CVE identifiers referenced below for details.
There is no known workaround at this time.
All openssh users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/openssh-7.1_p1-r2"
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Gentoo | any | all | net-misc/openssh | < 7.1_p1-r2 | UNKNOWN |