124 matches found
CVE-2016-6210
creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/sshenumusers.rb 2018-08-29 07:58:51+00:00| published-proof-of-concept| https://t.me/antichat/2044 2025-02-06 03:13:42+00:00| seen|...
EulerOS 2.0 SP1 : openssh (EulerOS-SA-2017-1189)
According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A covert timing channel flaw was found in the way OpenSSH handled authentication of non-existent users. A remote unauthenticated attacker could...
EulerOS 2.0 SP2 : openssh (EulerOS-SA-2017-1190)
According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A covert timing channel flaw was found in the way OpenSSH handled authentication of non-existent users. A remote unauthenticated attacker could...
RHEL 6 : openssh (RHSA-2017:2563)
The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2563 advisory. OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary f...
CentOS 6 : openssh (CESA-2017:2563)
An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
OracleVM 3.3 / 3.4 : openssh (OVMSA-2017-0150)
The remote OracleVM system is missing necessary patches to address critical security updates : - Fix for CVE-2016-6210: User enumeration via covert timing channel 1357442 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The package checks in this plugin were extracted from OracleVM Security...
openssh security update
5.3p1-123 - Fix for CVE-2016-6210: User enumeration via covert timing channel 1357442...
RedHat Update for openssh RHSA-2017:2029-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: Red Hat Security Advisory: openssh security, bug fix, and enhancement update
An update for openssh is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2015-6210
CVE-2015-6210 entry is rejected and does not represent an active vulnerability entry.
openSUSE Security Update : virglrenderer (openSUSE-2017-415)
This update for virglrenderer fixes the following issues : Security issues fixed : - CVE-2017-6386: memory leakage while in vrendcreatevertexelementsstate bsc1027376 - CVE-2017-6355: integer overflow while creating shader object bsc1027108 - CVE-2017-6317: fix memory leak in add shader program...
SUSE SLED12 / SLES12 Security Update : virglrenderer (SUSE-SU-2017:0798-1)
This update for virglrenderer fixes the following issues: Security issues fixed : - CVE-2017-6386: memory leakage while in vrendcreatevertexelementsstate bsc1027376 - CVE-2017-6355: integer overflow while creating shader object bsc1027108 - CVE-2017-6317: fix memory leak in add shader program...
CVE-2017-6210
**CVE-2017-6210 affects virglrenderer (vrend_decode_reset in vrend_decode.c) with exploitation by local guest OS users. It allows a denial of service via a NULL pointer dereference, causing the QEMU process to crash when context 0 is destroyed, and is rated CVSSv3.0: 6.5 (MEDIUM) / CVSSv2.0: 2.1 ...
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provid...
CVE-2016-6210
CVE-2016-6210 affects OpenSSH sshd prior to 7.3. When SHA-256/512 is used for user password hashing, sshd can reveal valid usernames by measuring timing differences during authentication for non-existent users, enabling remote, unauthenticated user enumeration. Impact is information disclosure; e...
CVE-2016-6210
sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provid...
F5 Networks BIG-IP : OpenSSH vulnerability (K14845276)
When SSHD tries to authenticate a non-existing user, it will pick up a fake password structure hard-coded in the SSHD source code. An attacker can measure timing information to determine if a user exists when verifying a password. CVE-2016-6210 C Tenable Network Security, Inc. The descriptive tex...
OpenSSH Vulnerability
Palo Alto Networks makes use of a the OpenSSH tool. CVE-2016-6210 was recently confirmed to be applicable to the version in use by PAN-OS. Ref 100977/CVE-2016-6210. To exploit this vulnerability, an attacker would have to guess usernames defined as system administrators on the firewall. This issu...