Lucene search
RedHatRHSA-2024:3166HistoryMay 22, 2024 - 6:35 a.m.
(RHSA-2024:3166) Moderate: openssh security update
2024-05-2206:35:48
access.redhat.com
16
openssh
security update
linux
unix
cve-2020-15778
red hat enterprise linux 8.10
command injection
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.
Security Fix(es):
- openssh: scp allows command injection when using backtick characters in the destination argument (CVE-2020-15778)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.10 Release Notes linked from the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | aarch64 | pam_ssh_agent_auth-debuginfo | < 0.10.3-7.24.el8 | pam_ssh_agent_auth-debuginfo-0.10.3-7.24.el8.aarch64.rpm |
| RedHat | 8 | s390x | openssh-keycat-debuginfo | < 8.0p1-24.el8 | openssh-keycat-debuginfo-8.0p1-24.el8.s390x.rpm |
| RedHat | 8 | x86_64 | openssh-ldap | < 8.0p1-24.el8 | openssh-ldap-8.0p1-24.el8.x86_64.rpm |
| RedHat | 8 | ppc64le | pam_ssh_agent_auth-debuginfo | < 0.10.3-7.24.el8 | pam_ssh_agent_auth-debuginfo-0.10.3-7.24.el8.ppc64le.rpm |
| RedHat | 8 | s390x | openssh-clients | < 8.0p1-24.el8 | openssh-clients-8.0p1-24.el8.s390x.rpm |
| RedHat | 8 | x86_64 | openssh-keycat | < 8.0p1-24.el8 | openssh-keycat-8.0p1-24.el8.x86_64.rpm |
| RedHat | 8 | aarch64 | pam_ssh_agent_auth | < 0.10.3-7.24.el8 | pam_ssh_agent_auth-0.10.3-7.24.el8.aarch64.rpm |
| RedHat | 8 | ppc64le | openssh-askpass | < 8.0p1-24.el8 | openssh-askpass-8.0p1-24.el8.ppc64le.rpm |
| RedHat | 8 | ppc64le | openssh-debuginfo | < 8.0p1-24.el8 | openssh-debuginfo-8.0p1-24.el8.ppc64le.rpm |
| RedHat | 8 | s390x | pam_ssh_agent_auth | < 0.10.3-7.24.el8 | pam_ssh_agent_auth-0.10.3-7.24.el8.s390x.rpm |
Related
nessus
nessus
EulerOS Virtualization for ARM 64 3.0.6.0 : openssh (EulerOS-SA-2021-2018)
2021-06-30 00:00:00
IBM Spectrum Protect Plus OpenSSH Remote Command Injection
2021-06-30 00:00:00
CentOS 8 : openssh (CESA-2024:3166)
2024-05-22 00:00:00
ibm
ibm
osv
osv
Moderate: openssh security update
2024-05-22 00:00:00
cbl_mariner
cbl_mariner
CVE-2020-15778 affecting package openssh 8.0p1-13
2020-11-30 19:30:42
cvelist
cvelist
CVE-2020-15778
2020-07-24 00:00:00
CVE-2023-38336
2023-07-14 00:00:00
f5
f5
K04305530 : SCP vulnerability CVE-2020-15778
2020-09-23 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-1993)
2021-06-29 00:00:00
OpenBSD OpenSSH <= 8.6 Command Injection Vulnerability
2020-08-03 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-2097)
2021-07-07 00:00:00
githubexploit
githubexploit
Exploit for OS Command Injection in Openbsd Openssh
2021-07-15 01:04:24
Exploit for OS Command Injection in Openbsd Openssh
2020-07-18 05:15:05
nvd
nvd
CVE-2020-15778
2020-07-24 14:15:12
CVE-2023-38336
2023-07-14 22:15:09
almalinux
almalinux
Moderate: openssh security update
2024-05-22 00:00:00
cve
cve
CVE-2020-15778
2020-07-24 14:15:12
CVE-2023-38336
2023-07-14 22:15:09
alpinelinux
alpinelinux
CVE-2020-15778
2020-07-24 14:15:00
prion
prion
Command injection
2020-07-24 14:15:00
Command injection
2023-07-14 22:15:00
debiancve
debiancve
CVE-2020-15778
2020-07-24 14:15:12
CVE-2023-38336
2023-07-14 22:15:09
vulnrichment
vulnrichment
CVE-2020-15778
2020-07-24 00:00:00
oraclelinux
oraclelinux
openssh security update
2024-05-23 00:00:00
gentoo
gentoo
OpenSSH: Multiple Vulnerabilities
2022-12-28 00:00:00
ubuntucve
ubuntucve
CVE-2020-15778
2020-07-24 00:00:00
CVE-2023-38336
2023-07-14 00:00:00
redhatcve
redhatcve
CVE-2020-15778
2020-07-24 18:37:46
redhat
redhat
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov