Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2024-39894
HistoryJul 02, 2024 - 6:15 p.m.

CVE-2024-39894

2024-07-0218:15:00
Google
osv.dev
14
openssh
timing attack
vulnerability
obscurekeystroketiming logic error

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

JSON

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry (e.g., for su and Sudo) because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur.

Related

openvas 2
debiancve 1
nessus 3
osv 1
cvelist 1
f5 1
ubuntu 1
redhatcve 1
ubuntucve 1
redos 1
alpinelinux 1
nvd 1
vulnrichment 1
cbl_mariner 1
cve 1
openvas
openvas
OpenBSD OpenSSH 9.5p1 - 9.7p1 Information Disclosure Vulnerability
2024-07-01 00:00:00
Ubuntu: Security Advisory (USN-6887-1)
2024-07-10 00:00:00
debiancve
debiancve
CVE-2024-39894
2024-07-02 18:15:03
nessus
nessus
Ubuntu 24.04 LTS : OpenSSH vulnerability (USN-6887-1)
2024-07-10 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : openssh (SUSE-SU-2024:2393-1)
2024-07-11 00:00:00
OpenSSH < 9.8 RCE
2024-07-01 00:00:00
osv
osv
openssh vulnerability
2024-07-09 14:04:56
cvelist
cvelist
CVE-2024-39894
2024-07-02 00:00:00
f5
f5
K000141045: OpenSSH vulnerability CVE-2024-39894
2024-09-12 00:00:00
ubuntu
ubuntu
OpenSSH vulnerability
2024-07-09 00:00:00
redhatcve
redhatcve
CVE-2024-39894
2024-07-03 16:27:00
ubuntucve
ubuntucve
CVE-2024-39894
2024-07-02 00:00:00
redos
redos
ROS-20240704-02
2024-07-04 00:00:00
alpinelinux
alpinelinux
CVE-2024-39894
2024-07-02 18:15:03
nvd
nvd
CVE-2024-39894
2024-07-02 18:15:03
vulnrichment
vulnrichment
CVE-2024-39894
2024-07-02 00:00:00
cbl_mariner
cbl_mariner
CVE-2024-39894 affecting package openssh for versions less than 9.8p1-1
2024-08-25 15:13:42
cve
cve
CVE-2024-39894
2024-07-02 18:15:03

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

Low

JSON
Related for OSV:CVE-2024-39894
openvas2debiancve1nessus3osv1cvelist1f51ubuntu1redhatcve1ubuntucve1redos1alpinelinux1nvd1vulnrichment1cbl_mariner1cve1