57 matches found
PT-2026-70884
Name of the Vulnerable Software and Affected Versions OpenSSH versions prior to 10.5 Description A use-after-free condition exists in ssh when a specific pair of remote-forwarding operations occur concurrently, leading to the potential misuse of reallocated data. Recommendations Update to version...
CVE-2026-73282: Use After Free
In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent...
OpenSSH -- Multiple vulnerbilities
The OpenSSH project reports: ssh-agent1: fix an interaction between agent locking and the [email protected] extension that is used to identify forwarded agents. ssh1: avoid potential realloc use-after-free in the client if a remote forwarding is added via the local session multiplexing...
What an SSH Tunnel Actually Does and When You Should Use One
Learn how SSH tunnels securely forward network traffic, when local, remote, and dynamic forwarding help, and why they are best for controlled, temporary access...
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the...
golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the...
QSpy: A Quantum RAT for Circuit Spying and IP Theft
As quantum computing platforms increasingly adopt cloud-based execution, users submit quantum circuits to remote compilers and backends, trusting that what they submit is exactly what will be run. This shift introduces new trust assumptions in the submission pipeline, which remain largely...
EUVD-1999-1140
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2022-46341
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIPassiveUngrab request accesses out-of-bounds memory when invoked wit...
xorg-x11-server: XTestSwapFakeInput stack overflow
A vulnerability was found in X.Org. The issue occurs due to the swap handler for the XTestFakeInput request of the XTest extension, possibly corrupting the stack if GenericEvents with lengths larger than 32 bytes are sent through the XTestFakeInput request. This flaw can lead to local privilege...
OpenSSH Client Unauthorized Remote Forwarding
You are running OpenSSH SSH client before 2.3.0. This version does not properly disable X11 or agent forwarding, which could allow a malicious SSH server to gain access to the X11 display and sniff X11 events, or gain access to the ssh-agent. OpenVAS Vulnerability Test $Id: sshforwarding.nasl 802...
OpenSSH Client Unauthorized Remote Forwarding
The remote host is running OpenSSH SSH client before 2.3.0. SPDX-FileCopyrightText: 2003 Xue Yong Zhi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:openbsd:openssh";...
OpenSSH Client < 2.3.0 X11 Unauthorized Remote Forwarding
Binary data 1979.prm...
CVE-1999-1159
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root...
CVE-1999-1159: Undefined Security Weakness
SSH 2.0.11 and earlier allows local users to request remote forwarding from privileged ports without being root...
ssh2-remote-forward.txt
Date: Wed, 30 Dec 1998 00:04:47 +1100 From: Darren Reed To: [email protected] Subject: ssh2 security problem and patch fwd This just came across the ssh list...I've deleted the patch for brievity original length was some 2900 lines. From [email protected] Tue Dec 29 23:13:34 EDT 1998 From:...
