Openssh Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

7.111
3.011
7.010
7.210
3.210

Przeciwdziałanie

Official Fix89
Temporary Fix0
Workaround3
Unavailable3
Not Defined20

Wykorzystywanie

High3
Functional0
Proof-of-Concept40
Unproven7
Not Defined65

Wektor dostępu

Not Defined0
Physical0
Local16
Adjacent6
Network93

Uwierzytelnianie

Not Defined0
High0
Low24
None91

Interakcja z użytkownikiem

Not Defined0
Required5
None110

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤31
≤49
≤57
≤638
≤718
≤828
≤96
≤108

CVSSv3 Temp

≤10
≤20
≤32
≤48
≤516
≤632
≤732
≤816
≤96
≤103

VulDB

≤10
≤20
≤31
≤410
≤512
≤640
≤712
≤823
≤99
≤108

NVD

≤10
≤20
≤30
≤40
≤51
≤610
≤77
≤811
≤92
≤104

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k1
<5k0
<10k9
<25k48
<50k43
<100k14
≥100k0

Wykorzystaj dzisiaj

<1k82
<2k2
<5k15
<10k9
<25k5
<50k2
<100k0
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (117): 1.2, 1.2.1, 1.2.2, 1.2.3, 1.2.27, 1.3, 1.5, 1.5.7, 1.5.8, 1.233, 2.0, 2.1, 2.1.1, 2.2, 2.3, 2.3.1, 2.5, 2.5.1, 2.5.2, 2.9, 2.9.9, 2.9.9p2, 2.9p1, 2.9p2, 3.0, 3.0.1, 3.0.1p1, 3.0.2, 3.0.2p1, 3.0p1, 3.1, 3.1p1, 3.2, 3.2.2, 3.2.2p1, 3.2.3p1, 3.3, 3.3p1, 3.4, 3.4p1, 3.5, 3.5p1, 3.6, 3.6.1, 3.6.1p1, 3.6.1p2, 3.7, 3.7.1, 3.7.1p1, 3.7.1p2, 3.7p1, 3.8, 3.8.1, 3.8.1p1, 3.9, 3.9.1, 3.9.1p1, 4.0, 4.0p1, 4.1, 4.1p1, 4.2, 4.2p1, 4.3, 4.3p1, 4.3p2, 4.4, 4.4p1, 4.5, 4.6, 4.7, 4.8, 5.0, 5.6, 5.7, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5, 6.6, 6.7, 6.8, 6.9, 7.0, 7.1, 7.1p1, 7.2, 7.2p1, 7.2p2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.9p1, 8.0, 8.1, 8.2, 8.3, 8.3p1, 8.4, 8.5, 8.6, 8.7, 8.8, 9.0, 9.1, 9.2, 9.3, 9.3p1, 9.4, 9.5, 9.6

Typ oprogramowania: Connectivity Software

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2023-12-246.36.3OpenSSH DRAM Rowhammer weak authentication$5k-$25k$5k-$25kNot DefinedNot Defined0.36CVE-2023-51767
2023-12-186.46.2OpenSSH Name privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.15CVE-2023-51385
2023-12-185.55.4OpenSSH ssh-agent Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.15CVE-2023-51384
2023-12-175.75.6OpenSSH Binary Packet Protocol Terrapin weak encryption$5k-$25k$0-$5kNot DefinedOfficial Fix0.15CVE-2023-48795
2023-07-197.47.1OpenBSD OpenSSH PKCS 11 privilege escalation$5k-$25k$5k-$25kProof-of-ConceptOfficial Fix0.04CVE-2023-38408
2023-03-177.67.5OpenSSH ssh-add Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.05CVE-2023-28531
2023-02-037.77.6OpenBSD OpenSSH compat.c memory corruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-25136
2022-03-135.65.4OpenSSH FIDO Authentication weak authentication$5k-$25k$0-$5kNot DefinedOfficial Fix0.07CVE-2021-36368
2021-09-274.64.4OpenSSH Supplemental Group privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.09CVE-2021-41617
2021-09-163.73.6OpenSSH Login Session information disclosure$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2016-20012
2021-03-065.85.6OpenSSH ssh-agent memory corruption$25k-$100k$0-$5kNot DefinedOfficial Fix0.04CVE-2021-28041
2020-07-246.46.4OpenSSH scp scp.c privilege escalation$25k-$100k$25k-$100kNot DefinedUnavailable0.08CVE-2020-15778
2020-06-294.84.8OpenSSH Algorithm Negotiation information disclosure$5k-$25k$5k-$25kNot DefinedNot Defined0.05CVE-2020-14145
2020-06-016.96.9OpenSSH scp Client privilege escalation$5k-$25k$5k-$25kNot DefinedUnavailable0.03CVE-2020-12062
2019-10-096.56.4OpenSSH XMSS Key memory corruption$5k-$25k$0-$5kNot DefinedOfficial Fix0.08CVE-2019-16905
2019-02-086.86.8gsi-openssh-server sshd_config privilege escalation$0-$5k$0-$5kNot DefinedNot Defined0.03CVE-2019-7639
2019-01-315.35.1OpenSSH scp privilege escalation$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.18CVE-2019-6111
2019-01-315.95.6OpenSSH privilege escalation$5k-$25k$0-$5kProof-of-ConceptOfficial Fix0.05CVE-2019-6110
2019-01-315.95.8OpenSSH Encoding progressmeter.c refresh_progress_meter privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2019-6109
2019-01-105.85.7OpenSSH scp Client scp.c privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2018-20685
2018-08-285.35.2OpenSSH GSS2 auth-gss2.c Username information disclosure$5k-$25k$5k-$25kNot DefinedWorkaround0.04CVE-2018-15919
2018-08-175.35.2OpenSSH auth2-gss.c information disclosure$5k-$25k$0-$5kHighOfficial Fix0.04CVE-2018-15473
2018-01-216.46.3OpenSSH sshd packet.c denial of service$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2016-10708
2017-10-265.35.0OpenSSH Readonly Mode sftp-server.c process_open privilege escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2017-15906
2016-12-196.86.6OpenSSH Access Control privilege escalation$25k-$100k$0-$5kProof-of-ConceptOfficial Fix0.04CVE-2016-10009

90 więcej wpisów nie jest pokazywanych

Want to stay up to date on a daily basis?

Enable the mail alert feature now!