AlmaLinux 9.6 [TuxCare] Security Update: openssh / openssh-askpass / openssh-clients / openssh-keycat / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1767955216)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767955216 advisory. - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources,...

CentOS Linux 8.4 [TuxCare] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1767627828)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1767627828 advisory. - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources,...

Amazon Linux 2023 : libssh, libssh-config, libssh-devel (ALAS2023-2026-3096)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3096 advisory. A flaw was found in libssh. A remote authenticated client can issue SSHFXPREAD requests with an arbitrarily large length, causing a libssh SFTP server to allocate excessive memory and...

CVE-2026-4631-cockpit-RCE

CVE-2026-4631 — Outil d'exploitation de masse Cockpit Exécution de code à distance non authentifiée via injection d'argument de ligne de commande SSH Versions Cockpit 327 – 359 | CVSS 9.8 Critique | CWE-78 Outil d'exploitation de masse pour CVE-2026-4631 sur le service web Cockpit cockpit-ws, por...

CVE-2023-51385

CVE-2023-51385 OpenSSH ProxyCommand RCE 1. Lorsque votre ProxyCommand est configuré comme suit : Host .com ProxyCommand /usr/bin/nc -X connect -x 127.0.0.1:7890 %h %p 2. Utilisez la commande suivante pour la preuve de concept git clone https://github.com/Le1a/CVE-2023-51385 --recurse-submodules...

CVE-2023-51385-

RCE via insecure /.ssh/config L'utilisation de jetons tels que %h, %p est assez courante pour utiliser des tunnels et du proxy de connexion via SSH.ProxyCommand Configuration vulnérable host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Note : lors de mon évaluation...

CVE-2017-1000117

CVE-2017-1000117 Ce module peut être utilisé pour tester si vous êtes vulnérable à CVE-2017-1000117 git clone https://github.com/timwr/CVE-2017-1000117.git --recurse-submodules ls CVE-2017-1000117 Sortie si vous êtes vulnérable : $ git clone https://github.com/timwr/CVE-2017-1000117.git...

CVE-2023-51385---OpenSSH-ProxyCommand-Injection-PoC

🔐 CVE-2023-51385 - PoC d'injection ProxyCommand OpenSSH Ce dépôt contient une preuve de concept pour CVE-2023-51385, une vulnérabilité d'injection de commande dans l'option ProxyCommand d'OpenSSH. Un attaquant ayant le contrôle de la configuration SSH ou de chaînes ProxyCommand non fiables peut...

CVE-2023-51385_test

Validation de CVE-2023-51385 Tout d'abord, ajoutez le contenu suivant dans /.ssh/config : host .example.com ProxyCommand /usr/bin/nc -X connect -x 192.0.2.0:8080 %h %p Il existe une injection de commande dans la déclaration du fichier .gitmodules : url = ssh://echo helloworld...

Updated libssh packages fix security vulnerabilities

Stack buffer overflow in SFTP server longname construction. CVE-2026-15370 Denial of service via zero advertised channel packet size. CVE-2026-59843 Denial of service via oversized SFTP read length. CVE-2026-59844 Denial of service via unchecked ProxyCommand fork failure. CVE-2026-59845 Informati...

MGASA-2026-0425 Updated libssh packages fix security vulnerabilities

Stack buffer overflow in SFTP server longname construction. CVE-2026-15370 Denial of service via zero advertised channel packet size. CVE-2026-59843 Denial of service via oversized SFTP read length. CVE-2026-59844 Denial of service via unchecked ProxyCommand fork failure. CVE-2026-59845 Informati...

EulerOS Virtualization 2.11.0 : openssh (EulerOS-SA-2026-3534)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed ...

EulerOS Virtualization 2.11.1 : openssh (EulerOS-SA-2026-3447)

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled. A machine-in-the-middle attack can be performed ...

Astra Linux – Vulnerability in OpenSSH

In OpenSSH versions prior to 10.1, control characters in user names that originated from certain potentially untrusted sources could lead to code execution when ProxyCommand was used. The potentially untrusted sources include the command line and the %-sequence expansion from a configuration file...

Astra Linux – Vulnerability in sshfs-fuse

SSHFS is a network filesystem client for connecting to SSH servers. From version 1.4 up to 3.7.6, SSHFS accepts a bracketed mount source such as -oProxyCommand=CMD:/path. The findbasepath function removes the brackets, leaving a host value that starts with a “-” and is passed directly to ssh as a...

Astra Linux – Vulnerability in libssh

A flaw was discovered in libssh. By using the ProxyCommand or ProxyJump feature, users can exploit unvalidated hostname syntax on the client side. This issue may allow an attacker to inject malicious code into the commands related to these features via the hostname parameter...

VulnCheck KEV: CVE-2026-45695

Kopia is a cross-platform backup tool for Windows, macOS, and Linux with fast incremental backups, client-side end-to-end encryption, compression, and data deduplication. Prior to 0.23.0, Kopia's HTTP server started with --without-password accepts unauthenticated requests to /api/v1/repo/exists a...

AlmaLinux 8 : libssh (ALSA-2026:62218)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:62218 advisory. libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read length...

MiracleLinux 8 : libssh-0.9.6-17.el8_10 (AXSA:2026-1742:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1742:02 advisory. libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read...

MiracleLinux 9 : libssh-0.10.4-19.el9_8 (AXSA:2026-1751:03)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1751:03 advisory. libssh: libssh: denial of service via zero advertised channel packet size CVE-2026-59843 libssh: libssh: denial of service via oversized SFTP read...