USN-8937-1 openssh, openssh-gssapi vulnerabilities

It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. CVE-2026-106552 It was discovered that OpenSSH's sshd...

openssh: OpenSSH: Information disclosure via GSSAPI authentication state persistence

A flaw was found in OpenSSH's SSH daemon sshd. When Generic Security Service Application Program Interface GSSAPI authentication is enabled, authentication state can improperly persist across separate authentication attempts. A local user could exploit this condition during sequential...

CVE-2024-6387-OpenSSH-Analysis

CVE-2024-6387 OpenSSH Analysis Overview Security analysis of CVE-2024-6387 vulnerability affecting OpenSSH server. Tools Used Kali Linux Nmap Metasploitable 2 Vulnerability Details CVE-2024-6387 is a vulnerability in OpenSSH caused by a race condition in sshd, which may allow an unauthorised remo...

CVE-2024-6387

cve-2024-6387-poc a signal handler race condition in OpenSSH's server sshd...

CVE-2024-6387-poc-1

CVE-2024-6387 regreSSHion in OpenSSH Description CVE-2024-6387, nicknamed "regreSSHion," is a critical vulnerability in OpenSSH that allows unauthenticated remote attackers to execute code with root privileges on vulnerable Linux systems. This vulnerability arises from a race condition in the...

CVE-2024-6387

OpenSSH CVE-2024-6387 Vulnerability Checker This Python script checks if servers are running a vulnerable version of OpenSSH that is susceptible to the CVE-2024-6387 vulnerability. It scans the specified IP addresses or network ranges for the OpenSSH banner and compares it against known vulnerabl...

Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS : OpenSSH vulnerabilities (USN-8928-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8928-1 advisory. It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. ...

CVE-2023-25136

CVE-2023-25136 OpenSSH 9.1 vulnerability mass scan and exploit Description OpenSSH server sshd 9.1 introduced a double-free vulnerability during options.kexalgorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default...

CVE-2024-3094

🚨 CVE-2024-3094 — XZ Utils Backdoor 🧠 Overview CVE-2024-3094 is a critical supply chain compromise affecting the widely used XZ Utils compression library. A malicious actor inserted a stealth backdoor into upstream releases, enabling remote code execution RCE via tampered liblzma. ⚠️ This...

CVE-2024-6387

转载原文 CVE-2024-6387 - PoC 📜 Description Note: This script is a quick prototype PoC, expect some errors and bugs may occur. Tested on: Kali Linux, ParrotSec, Ubuntu 22.04 Remote Unauthenticated Code Execution Vulnerability in OpenSSH server A signal handler race condition was found in OpenSSH's...

CVE-2024-3094-backdoor-env-container

CVE-2024-3094 SSH Backdoor Container Env This is an environment running CVE-2024-3094 sshd backdoor instance, working with this exploit: https://github.com/amlweems/xzbot. Experiments Test in Docker IT IS NOT a Docker container. I had tried making this vulnerability env with docker but failed: 1...

regreSSHion-CVE-2024-6387-

CVE-2024-6387 Checker This README provides instructions for using the script to check if your OpenSSH installation is vulnerable to CVE-2024-6387. The script inspects the installed sshd binaries on your system, determines their versions, and checks for vulnerability status based on the detected...

UBUNTU-CVE-2026-109786

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...

CVE-2026-109786

In fail2ban 0.10.5 through 1.1.1 before ddd879d, the sshd filter config/filter.d/sshd.conf accepts an "on " suffix after the host address. Because OpenSSH logs the offered username verbatim, a remote unauthenticated attacker can use a username such as "x VICTIM-SOURCE-IP-ADDRESS on" to make...

Security Bulletin:Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in the IBM Netezza Appliance have been remediated in the latest security patch releases of NPS and Callhome. Vulnerability Details CVEID:CVE-2026-59999 DESCRIPTION: In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over...

USN-8928-1 openssh vulnerabilities

It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. CVE-2026-106552 It was discovered that OpenSSH's sshd...

USN-8928-1: OpenSSH vulnerabilities

It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. CVE-2026-106552 It was discovered that OpenSSH's sshd...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-130052)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130052 advisory. In sshd in OpenSSH before 10.5, the restrict keyword in authorizedkeys was supposed to be applicable to tunnel forwarding but was not. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: openssh (UTSA-2026-130055)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130055 advisory. sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-130150)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130150 advisory. sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory...