Fedora 42 : openssh (2026-9d457091e8)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9d457091e8 advisory. Added fixes for CVE-2025-61985 and CVE-2025-61984 Tenable has extracted the preceding description block directly from the Fedora security advisory...

Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2025-2626)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : openssh (ELSA-2025-23480)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23480 advisory. - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128401 Tenable has extracted the preceding description block directly from t...

Oracle Linux 8 : openssh (ELSA-2025-23481)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23481 advisory. - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 Tenable has extracted the preceding description block directly from t...

openssh security update

8.0p1-27.0.1 - Update upstream references Orabug: 36587718 8.0p1-27 - CVE-2025-61984: Reject usernames with control characters Resolves: RHEL-128400 - CVE-2025-61985: Reject URL-strings with NULL characters Resolves: RHEL-128390...

ALSA-2025:23481 Moderate: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand...

Exploit for CVE-2025-61984

Test-CVE-2025-61984 Ref...

OpenSSH < 10.1 / 10.1p1 Multiple Vulnerabilities

The version of OpenSSH installed on the remote host is prior to 10.1. It is, therefore, affected by multiple vulnerabilities: - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a...

BELL-CVE-2025-61984

Bulletin has no description...

DEBIAN-CVE-2025-61984

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...

CVE-2025-61984

creationtimestamp| type| source ---|---|--- 2025-10-06 19:14:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115328817112053708 2025-10-07 01:17:03+00:00| seen| https://sploitus.com/exploit?id=B7EACB4F-A5CF-5C5A-809F-E03CCE2AB150&utmsource=rss&utmmedium=rss 2025-10-07 01:17:03+00:00|...