7858 matches found
Debian: Security Advisory (DLA-3532-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-38408 affecting package openssh 8.9p1-2
CVE-2023-38408 affecting package openssh 8.9p1-2. A patched version of the package is available...
Oracle Linux 7 : openssh (ELSA-2023-12711)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-12711 advisory. 7.4p1-23.0.1fips - Change Epoch from 1 to 10 - Enable fips KDF POST Orabug: 32461750 - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method Orabug:...
Oracle Linux 6 : openssh (ELSA-2023-4428)
The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4428 advisory. - Fix for CVE-2016-6210 incomplete fix Orabug: 29375502CVE-2016-6210 Tenable has extracted the preceding description block directly from the Oracle Lin...
Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2023-273)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-273 advisory. The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if the target user's ssh-agent is forwarded to an...
Amazon Linux 2 : openssh (ALAS-2023-2202)
The version of openssh installed on the remote host is prior to 7.4p1-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2202 advisory. An issue was discovered in OpenSSH 7.4 on Amazon Linux 2 and Amazon Linux 1. The fix for CVE-2019-6111 only covered cases where an...
Amazon Linux AMI : openssh (ALAS-2023-1794)
The version of openssh installed on the remote host is prior to 7.4p1-22.78. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1794 advisory. An issue was discovered in OpenSSH 7.4 on Amazon Linux 2 and Amazon Linux 1. The fix for CVE-2019-6111 only covered cases where ...
Amazon Linux 2 : openssh (ALAS-2023-2176)
The version of openssh installed on the remote host is prior to 7.4p1-22. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2176 advisory. The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code...
F5 Networks BIG-IP : SCP vulnerability (K04305530)
The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.10.8 / 16.1.6.1 / 17.1.3.1 / 17.5.1. It is, therefore, affected by a vulnerability as referenced in the K04305530 advisory. scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as...
openssh security update
5.3p1-124.0.2 - Fix for CVE-2016-6210 incomplete fix Orabug: 29375502CVE-2016-6210 5.3p1-124.0.1 - Fix for CVE-2023-38408 Orabug: 35672523...
CVE-2021-36368 affecting package openssh for versions less than 8.9p1-1
CVE-2021-36368 affecting package openssh for versions less than 8.9p1-1. An upgraded version of the package is available that resolves this issue...
CVE-2023-38408 affecting package openssh for versions less than 8.9p1-1
CVE-2023-38408 affecting package openssh for versions less than 8.9p1-1. A patched version of the package is available...
openssh security update
7.4p1-23.0.1fips - Change Epoch from 1 to 10 - Enable fips KDF POST Orabug: 32461750 - Disable diffie-hellman-group-exchange-sha256 KEX FIPS method Orabug: 32461739 7.4p1-23.0.1 - enlarge format buffer size for certificate serial number so the log message can record any 64-bit integer without...
USN-6242-1: OpenSSH vulnerability | Cloud Foundry
Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 22.04 Description It was discovered that OpenSSH incorrectly handled loading certain PKCS11 providers. If a user forwarded their ssh-agent to an untrusted system, a remote attacker could possibly use this issue to load...
Ubuntu: Security Advisory (USN-6279-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Exploit for Uncontrolled Resource Consumption in Discourse
CVE-2023-38408 PoC for the recent critical vuln affecting Open...
Exploit for Unquoted Search Path or Element in Openbsd Openssh
CVE-2023-38408 PoC for the recent critical vuln affecting Open...
CLSA-2023-1691606742 openssh: Fix of CVE-2023-38408
CVE-2023-38408: checks libraries before dlopen and separate ssh-pkcs11-helpers for each p11 module...
