46 matches found
CLSA-2026-1792933979 openssh: Fix of 4 CVEs
CVE-2026-106555: sshd kept GSSAPI client state from a partially completed authentication attempt and could reuse it in a later attempt; reset it before each attempt. Backport upstream commits 670510d1 and d549f99d. - CVE-2026-106553: sshd stored delegated GSSAPI credentials even when GSSAPI user...
CLSA-2026-1792933338 openssh: Fix of 4 CVEs
CVE-2026-106555: sshd kept GSSAPI client state from a partially completed authentication attempt and could reuse it in a later attempt; reset it before each attempt. Backport upstream commits 670510d1 and d549f99d. - CVE-2026-106553: sshd stored delegated GSSAPI credentials even when GSSAPI user...
CLSA-2026-1792932827 openssh: Fix of 4 CVEs
CVE-2026-106555: sshd kept GSSAPI client state from a partially completed authentication attempt and could reuse it in a later attempt; reset it before each attempt. Backport upstream commits 670510d1 and d549f99d. - CVE-2026-106553: sshd stored delegated GSSAPI credentials even when GSSAPI user...
CLSA-2026-1792197391 openssh: Fix of 8 CVEs
CVE-2026-106555: sshd kept GSSAPI client state from a partially completed GSSAPIAuthentication attempt and could reuse it in a later attempt; reset the global GSSAPI client state before each authentication attempt. Backport upstream commit 670510d1. - CVE-2026-106553: sshd could store delegated...
OpenSSH -- Multiple vulnerabilities
The OpenSSH project reports: sftp1: more strictly validate paths returned from the server to avoid some cases where a server could return paths that could manipulate a recursive copy operation into writing outside its target directory. sshd8: when GSSAPIAuthentication is in use, only store GSSAPI...
EUVD-2001-1446
Malware in sbrugna...
Denial Of Service (DoS)
putty is vulnerable to Denial Of Service DoS. The vulnerability is due to remote SSH-1 servers accessing freed memory locations via an SSH1MSGDISCONNECT message in PuTTY, allows remote SSH-1 servers to trigger a denial of service condition...
K17448: OpenSSH vulnerability CVE-2001-1473
Security Advisory Description The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by creating a Session ID that matches the Session ID of the target, but which uses a public key pair that is weaker than the target...
Mageia: Security Advisory (MGASA-2020-0003)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated putty packages fix security vulnerabilities
Updated putty package fixes security vulnerabilities: Two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. Vulnerability in all the SSH client tools PuTTY, Plink, PSFTP, and PSCP if a malicious program can impersonate Pageant. Crash in GSSAP...
Security update for putty (moderate)
openSUSE Security Update: Security update for putty Announcement ID: openSUSE-SU-2019:2292-1 Rating: moderate References: 1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 An update that fixes two vulnerabilities is...
Security update for putty (moderate)
openSUSE Security Update: Security update for putty Announcement ID: openSUSE-SU-2019:2276-1 Rating: moderate References: 1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Leap 15.0 An update that fixes two vulnerabilities is now available. Description: This upda...
Security update for putty (moderate)
openSUSE Security Update: Security update for putty Announcement ID: openSUSE-SU-2019:2277-1 Rating: moderate References: 1152753 Cross-References: CVE-2019-17068 CVE-2019-17069 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available. Description: This upda...
CVE-2019-17069
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...
CVE-2019-17069
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...
CVE-2019-17069
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...
Design/Logic Flaw
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...
CVE-2019-17069
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...
CVE-2019-17069
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...
CVE-2019-17069: Use After Free
PuTTY before 0.73 might allow remote SSH-1 servers to cause a denial of service by accessing freed memory locations via an SSH1MSGDISCONNECT message...