Openssh Vulnerabilidad

Cronología

El año pasado

Versión

7.111
3.011
7.010
7.210
3.210

Contramedidas

Official Fix89
Temporary Fix0
Workaround3
Unavailable3
Not Defined20

Explotabilidad

High3
Functional0
Proof-of-Concept40
Unproven7
Not Defined65

Vector de acceso

Not Defined0
Physical0
Local16
Adjacent6
Network93

Autenticación

Not Defined0
High0
Low24
None91

La interacción del usuario

Not Defined0
Required5
None110

C3BM Index

El año pasado

CVSSv3 Base

≤10
≤20
≤31
≤49
≤57
≤638
≤718
≤828
≤96
≤108

CVSSv3 Temp

≤10
≤20
≤32
≤48
≤516
≤632
≤732
≤816
≤96
≤103

VulDB

≤10
≤20
≤31
≤410
≤512
≤640
≤712
≤823
≤99
≤108

NVD

≤10
≤20
≤30
≤40
≤51
≤610
≤77
≤811
≤92
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k1
<5k0
<10k9
<25k48
<50k43
<100k14
≥100k0

Explotar hoy

<1k82
<2k3
<5k12
<10k8
<25k10
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

El año pasado

🔴 CTI Ocupaciones

Affected Versions (117): 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.27, 1.3, 1.5, 1.5.7, 1.5.8, 1.233, 2.0, 2.1, 2.1.1, 2.2, 2.3, 2.3.1, 2.5, 2.5.1, 2.5.2, 2.9, 2.9.9, 2.9.9p2, 2.9p1, 2.9p2, 3.0, 3.0.1, 3.0.1p1, 3.0.2, 3.0.2p1, 3.0p1, 3.1, 3.1p1, 3.2, 3.2.2, 3.2.2p1, 3.2.3p1, 3.3, 3.3p1, 3.4, 3.4p1, 3.5, 3.5p1, 3.6, 3.6.1, 3.6.1p1, 3.6.1p2, 3.7, 3.7.1, 3.7.1p1, 3.7.1p2, 3.7p1, 3.8, 3.8.1, 3.8.1p1, 3.9, 3.9.1, 3.9.1p1, 4.0, 4.0p1, 4.1, 4.1p1, 4.2, 4.2p1, 4.3, 4.3p1, 4.3p2, 4.4, 4.4p1, 4.5, 4.6, 4.7, 4.8, 5.0, 5.6, 5.7, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 7.0, 7.1, 7.1p1, 7.2, 7.2p1, 7.2p2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.9p1, 8.0, 8.1, 8.2, 8.3, 8.3p1, 8.4, 8.5, 8.6, 8.7, 8.8, 9.0, 9.1, 9.2, 9.3, 9.3p1, 9.4, 9.5, 9.6

Tipo de software: Connectivity Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2023-12-246.36.3OpenSSH DRAM Rowhammer autenticación débil$5k-$25k$5k-$25kNot DefinedNot Defined0.32CVE-2023-51767
2023-12-186.46.2OpenSSH Name escalada de privilegios$5k-$25k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-51385
2023-12-185.55.4OpenSSH ssh-agent Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.14CVE-2023-51384
2023-12-175.75.6OpenSSH Binary Packet Protocol Terrapin cifrado débil$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2023-48795
2023-07-197.47.1OpenBSD OpenSSH PKCS 11 escalada de privilegios$5k-$25k$5k-$25kProof-of-ConceptOfficial Fix0.07CVE-2023-38408
2023-03-177.67.5OpenSSH ssh-add Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2023-28531
2023-02-037.77.6OpenBSD OpenSSH compat.c desbordamiento de búfer$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-25136
2022-03-135.65.4OpenSSH FIDO Authentication autenticación débil$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-36368
2021-09-274.64.4OpenSSH Supplemental Group escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-41617
2021-09-163.73.6OpenSSH Login Session divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2016-20012
2021-03-065.85.6OpenSSH ssh-agent desbordamiento de búfer$25k-$100k$0-$5kNot DefinedOfficial Fix0.03CVE-2021-28041
2020-07-246.46.4OpenSSH scp scp.c escalada de privilegios$25k-$100k$5k-$25kNot DefinedUnavailable0.18CVE-2020-15778
2020-06-294.84.8OpenSSH Algorithm Negotiation divulgación de información$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2020-14145
2020-06-016.96.9OpenSSH scp Client escalada de privilegios$5k-$25k$5k-$25kNot DefinedUnavailable0.04CVE-2020-12062
2019-10-096.56.4OpenSSH XMSS Key desbordamiento de búfer$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2019-16905
2019-02-086.86.8gsi-openssh-server sshd_config escalada de privilegios$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2019-7639
2019-01-315.35.1OpenSSH scp escalada de privilegios$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.03CVE-2019-6111
2019-01-315.95.6OpenSSH escalada de privilegios$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.04CVE-2019-6110
2019-01-315.95.8OpenSSH Encoding progressmeter.c refresh_progress_meter escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-6109
2019-01-105.85.7OpenSSH scp Client scp.c escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2018-20685
2018-08-285.35.2OpenSSH GSS2 auth-gss2.c Username divulgación de información$5k-$25k$0-$5kNot DefinedWorkaround0.00CVE-2018-15919
2018-08-175.35.2OpenSSH auth2-gss.c divulgación de información$5k-$25k$0-$5kHighOfficial Fix0.05CVE-2018-15473
2018-01-216.46.3OpenSSH sshd packet.c denegación de servicio$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2016-10708
2017-10-265.35.0OpenSSH Readonly Mode sftp-server.c process_open escalada de privilegios$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2017-15906
2016-12-196.86.6OpenSSH Access Control escalada de privilegios$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.04CVE-2016-10009

90 no se muestran más entradas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!