EulerOS Virtualization 3.0.6.6 : openssh (EulerOS-SA-2021-1504)

According to the version of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiatio...

OpenSSH -- Double-free memory corruption in ssh-agent

OpenBSD Project reports: ssh-agent1: fixed a double-free memory corruption that was introduced in OpenSSH 8.2 . We treat all such memory faults as potentially exploitable. This bug could be reached by an attacker with access to the agent socket. On modern operating systems where the OS can provid...

PT-2021-2469

Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 8.5 Description The issue is related to a double free in ssh-agent, which may be relevant in less-common scenarios such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent ...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-1251)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1251)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-1270)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1270)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows...

A New Linux Malware Targeting High-Performance Computing Clusters

High-performance computing clusters belonging to university networks as well as servers associated with government agencies, endpoint security vendors, and internet service providers have been targeted by a newly discovered backdoor that gives attackers the ability to execute arbitrary commands o...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2021-1159)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : openssh (EulerOS-SA-2021-1159)

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The client side in OpenSSH 5.7 through 8.3 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows...

CentOS 8 : openssh (CESA-2019:3702)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3702 advisory. - openssh: scp client improper directory name validation CVE-2018-20685 - openssh: Missing character encoding in progress display allows for spoofing o...

openSUSE Security Update : openssh (openSUSE-2020-2298)

This update for openssh fixes the following issues : - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 - Fixed an issue where oracle cluster with cluvfy using...

Security Bulletin: IBM Security Guardium Insights is affected by multiple vulnerabilities

Summary IBM Security Guardium Insights has addressed the following vulnerabilities Vulnerability Details CVEID: CVE-2020-8244 DESCRIPTION: Node.js bl module could allow a remote attacker to obtain sensitive information, caused by a buffer over-read flaw in the consume function. By sending a...

SUSE SLES12 Security Update : openssh (SUSE-SU-2021:0022-1)

This update for openssh fixes the following issues : CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to...

SUSE-SU-2021:0022-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513...

Virtuozzo 6 : openssh / openssh-askpass / openssh-clients / etc (VZLSA-2019-0711)

An update for openssh is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

SUSE SLES15 Security Update : openssh (SUSE-SU-2020:3882-1)

This update for openssh fixes the following issues : CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. Fixed an issue where oracle cluster with cluvfy using 'scp' failing/missinterpreted bsc1148566. Note that Tenable Network Security has extracted the precedi...

Security update for openssh (moderate)

openSUSE Security Update: Security update for openssh Announcement ID: openSUSE-SU-2020:2298-1 Rating: moderate References: 1115550 1139398 1142000 1148566 1173513 1174162 Cross-References: CVE-2020-14145 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has 5 fixe...

OPENSUSE-SU-2020:2298-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2020-14145: Fixed a potential information leak during host key exchange bsc1173513. - Supplement libgtk-3-0 instead of libX11-6 to avoid installation on a textmode install bsc1142000 - Fixed an issue where oracle cluster with cluvfy using...

Denial Of Service (DoS)

openssh is vulnerable to denial of service DoS. The vulnerability exists through the sshpacketreadpoll2 function in packet.c allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted network traffic...