CVE-2024-39894

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry e.g., for su and Sudo because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur...

CVE-2024-39894

OpenSSH CVE-2024-39894 affects OpenSSH 9.5–9.7 (before 9.8). A logic error in the ObscureKeystrokeTiming feature can enable timing attacks on keystroke entry (e.g., echo-off password input for su and sudo) and potentially reveal keystrokes. Mitigation per linked advisories is to upgrade to OpenSS...

CVE-2024-39894

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry e.g., for su and Sudo because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur...