CVE-2024-6387-Mitigation-Ansible-Playbook

CVE-2024-6387 缓解措施 Ansible 剧本 本 Ansible 剧本用于在平台将 OpenSSH 更新至安全版本之前，缓解 regreSSHion RCE（CVE-2024-6387）漏洞带来的风险。 此处应用的缓解措施基于 Red Hat 提供的缓解建议。原文指出： 请注意，由于存在 MaxStartups 连接耗尽的可能性，sshd 服务器仍容易遭受拒绝服务攻击，但它将免受远程代码执行攻击的威胁。 在应用缓解措施之前，请牢记这一点。 先决条件 Ansible 安装了 OpenSSH 服务器的 Linux 服务器 前提假设 您有一个 drop-in...

EUVD-2015-6258

Malware in sbrugna...

EUVD-2008-1658

Malware in sbrugna...

Oracle Linux 8 : openssh (ELSA-2024-3166)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-3166 advisory. - Providing a kill switch for scp to deal with CVE-2020-15778 Resolves: RHEL-22870 Tenable has extracted the preceding description block directly from the Oracl...

Linux: BSI TR-02102-4 Encryption Algorithms

Recommended SSH encryption ciphers from TR-02102-4. Per the recommendations, AEADAES128GCM or AEADAES256GCM should be utilized when possible. Other ciphers accepted by the recommendations are aes128-ctr, aes192-ctr, and aes256-ctr. Note: This check fails if any algorithms are found that are not...

openssh security, bug fix, and enhancement update

8.0p1-13 - Upstream: ClientAliveCountMax=0 disable the connection killing behaviour 2015828 8.0p1-12 - Add support for 'Include' directive in sshdconfig file 1926103 8.0p1-11 - CVE-2021-41617 upstream fix 2008885...

Installing Veeam Data Mover service Error: scp: error: unexpected filename:

Challenge When adding a Linux server to Veeam Backup & Replication, the New Linux Server wizard displays the error: Installing Veeam Data Mover service Error: scp: error: unexpected filename: Copy Log Example C:\ProgramData\Veeam\Backup\Utils\Util.InfraItemSaver.log Info Uploading file to...

OpenSSH -- OpenSSH 6.2 through 8.7 failed to correctly initialise supplemental groups when executing an AuthorizedKeysCommand or AuthorizedPrincipalsCommand

OpenBSD Project reports: sshd8 from OpenSSH 6.2 through 8.7 failed to correctly initialise supplemental groups when executing an AuthorizedKeysCommand or AuthorizedPrincipalsCommand, where a AuthorizedKeysCommandUser or AuthorizedPrincipalsCommandUser directive has been set to run the command as ...

SUSE: Security Advisory (SUSE-SU-2018:3540-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD : cloud-init -- Wrong access permissions of authorized keys (8899298f-5a92-11eb-8558-3085a9a47796)

cloud-init reports : cloud-init release 20.4.1 is now available. This is a hotfix release, that contains a single patch to address a security issue in cloud-init 20.4. Briefly, for users who provide more than one unique SSH key to cloud-init and have a shared AuthorizedKeysFile configured in...

Linux: SSH RekeyLimit

RekeyLimit specifies the maximum amount of data that may be transmitted before the session key is renegotiated, optionally followed a maximum amount of time that may pass before the session key is renegotiated. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted fr...

Linux: SSH AuthenticationMethods

sshd reads configuration data from /etc/ssh/sshdconfig or the file specified with -f on the command line. The file contains keyword-argument pairs, one per line. Lines starting with Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and a...

Linux: SSH HostKeyAlgorithms

HostKeyAlgorithms specifies the host key algorithms that the client wants to use in order of preference Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Linux: SSH PasswordAuthentication

sshd reads configuration data from /etc/ssh/sshdconfig or the file specified with -f on the command line. The file contains keyword-argument pairs, one per line. Lines starting with Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

Linux: SSH RhostsRSAAuthentication

RhostsRSAAuthentication: Specifies whether rhosts or /etc/hosts.equiv authentication together with successful RSA host authentication is allowed. This option applies to protocol version 1 only. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced...

Linux: SSH RSAAuthentication

RSAAuthentication: Specifies whether pure RSA authentication is allowed. This option applies to protocol version 1 only. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Linux: SSH AllowAgentForwarding

AllowAgentForwarding: Specifies whether ssh-agent forwarding is permitted. Note that disabling agent forwarding does not improve security unless users are also denied shell access, as they can always install their own forwarders. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions...

Linux: SSH ListenAddress

ListenAddress specifies the local address sshd should listen on. If port is not specified, sshd will listen on the address and all prior Port options specified. The default is to listen on all local addresses. Multiple ListenAddress options are permitted. Additionally, any Port options must prece...

Linux: SSH DenyUsers

The DenyUsersvariable gives the system administrator the option of denying specific users to ssh into the system. The list consists of space separated user names. Numeric user IDs are not recognized with this variable. If a system administrator wants to restrict user access further by specificall...

Linux: SSH X11 Forwarding

sshd reads configuration data from /etc/ssh/sshdconfig or the file specified with -f on the command line. The file contains keyword-argument pairs, one per line. Lines starting with Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...