CVE-2024-39894

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry e.g., for su and Sudo because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur...

CVE-2024-39894

OpenSSH versions 9.5 through 9.7 before 9.8 are vulnerable to a timing attack against echo-off password entry (e.g., for su and Sudo ) due to an ObscureKeystrokeTiming logic error. This flaw allows a passive observer to detect real keystrokes and infer transmitted characters via packet timing. Af...

CVE-2024-39894

OpenSSH 9.5 through 9.7 before 9.8 sometimes allows timing attacks against echo-off password entry e.g., for su and Sudo because of an ObscureKeystrokeTiming logic error. Similarly, other timing attacks against keystroke entry could occur...