Проверьте свою версию
ssh -VCVE, затрагивающие 3.1
| CVE | Название | CVSS | Эксплуатируется | EPSS | Опубликовано |
|---|---|---|---|---|---|
| CVE-2026-123158 | sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password... | 8.1 | KEV | 18.9% | 2026-11-05 |
| CVE-2002-0640 | Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via... | 10.0 | — | 2002-07-03 | |
| CVE-2003-0693 | A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attacke... | 10.0 | — | 2003-09-22 | |
| CVE-2002-0639 | Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during... | 9.8 | — | 2002-07-03 | |
| CVE-2023-38408 | The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leadin... | 9.8 | — | 2023-07-20 | |
| CVE-2016-1908 | The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies o... | 9.8 | — | 2017-04-11 | |
| CVE-2010-4478 | OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAK... | 9.8 | — | 2010-12-06 | |
| CVE-2006-5051 | Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (cras... | 8.1 | — | 2006-09-27 | |
| CVE-2024-6387 | Openssh: regresshion - race condition in ssh allows rce/dos | 8.1 | — | 2024-07-01 | |
| CVE-2015-5600 | The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the... | 8.1 | — | 2015-08-03 | |
| CVE-2015-8325 | The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled... | 7.8 | — | 2016-05-01 | |
| CVE-2006-4924 | sshd in OpenSSH before 4.4, when using the version 1 SSH protocol, allows remote attackers to cause a denial o... | 7.8 | — | 2006-09-27 | |
| CVE-2016-10012 | The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does... | 7.8 | — | 2017-01-05 | |
| CVE-2003-1562 | sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authe... | 7.6 | — | 2003-12-31 | |
| CVE-2002-0575 | Buffer overflow in OpenSSH before 2.9.9, and 3.x before 3.2.1, with Kerberos/AFS support and KerberosTgtPassin... | 7.5 | — | 2002-06-18 | |
| CVE-2007-4752 | ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trust... | 7.5 | — | 2007-09-12 | |
| CVE-2003-0682 | "Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2... | 7.5 | — | 2003-10-06 | |
| CVE-2003-0695 | Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service o... | 7.5 | — | 2003-10-06 | |
| CVE-2010-5107 | The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connec... | 7.5 | — | 2013-03-07 | |
| CVE-2016-10708 | sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and... | 7.5 | — | 2018-01-21 | |
| CVE-2006-5794 | Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verific... | 7.5 | — | 2006-11-08 | |
| CVE-2016-6515 | The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for... | 7.5 | — | 2016-08-07 | |
| CVE-2020-15778 | scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backt... | 7.4 | — | 2020-07-24 | |
| CVE-2014-1692 | The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PA... | 7.3 | — | 2014-01-29 | |
| CVE-2016-10009 | Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers... | 7.3 | — | 2017-01-05 | |
| CVE-2015-6564 | Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0... | 7.0 | — | 2015-08-24 | |
| CVE-2016-10010 | sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as ro... | 7.0 | — | 2017-01-05 | |
| CVE-2019-6109 | An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious... | 6.8 | — | 2019-01-31 | |
| CVE-2019-6110 | In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (o... | 6.8 | — | 2019-01-31 | |
| CVE-2023-51385 | In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metachara... | 6.5 | — | 2023-12-18 | |
| CVE-2014-2653 | The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to... | 6.5 | — | 2014-03-27 | |
| CVE-2012-0814 | The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages contai... | 6.5 | — | 2012-01-27 | |
| CVE-2016-3115 | Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticate... | 6.4 | — | 2016-03-22 | |
| CVE-2015-6563 | The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data... | 6.4 | — | 2015-08-24 | |
| CVE-2004-1653 | The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users... | 6.4 | — | 2004-08-31 | |
| CVE-2016-10011 | authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents,... | 6.2 | — | 2017-01-05 | |
| CVE-2016-6210 | sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on... | 5.9 | — | 2017-02-13 | |
| CVE-2023-48795 | The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, al... | 5.9 | — | 2023-12-18 | |
| CVE-2019-6111 | An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the server... | 5.9 | — | 2019-01-31 | |
| CVE-2011-4327 | ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with uninte... | 5.5 | — | 2014-02-03 | |
| CVE-2018-15473 | OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid au... | 5.3 | — | 2018-08-17 | |
| CVE-2016-20012 | OpenSSH through 8.7 allows remote attackers, who have a suspicion that a certain combination of username and p... | 5.3 | — | 2021-09-15 | |
| CVE-2018-20685 | In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions via t... | 5.3 | — | 2019-01-10 | |
| CVE-2017-15906 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in... | 5.3 | — | 2017-10-26 | |
| CVE-2003-0190 | OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message whe... | 5.0 | — | 2003-05-12 | |
| CVE-2008-4109 | A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other... | 5.0 | — | 2008-09-18 | |
| CVE-2005-2798 | sshd in OpenSSH before 4.2, when GSSAPIDelegateCredentials is enabled, allows GSSAPI credentials to be delegat... | 5.0 | — | 2005-09-06 | |
| CVE-2007-2243 | OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine... | 5.0 | — | 2007-04-25 | |
| CVE-2006-5052 | Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attack... | 5.0 | — | 2006-09-27 | |
| CVE-2006-0225 | scp in OpenSSH 4.2p1 allows attackers to execute arbitrary commands via filenames that contain shell metachara... | 4.6 | — | 2006-01-25 | |
| CVE-2015-5352 | The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not us... | 4.3 | — | 2015-08-03 | |
| CVE-2004-0175 | Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite... | 4.3 | — | 2004-08-18 | |
| CVE-2014-2532 | sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows... | 4.2 | — | 2014-03-18 | |
| CVE-2010-4755 | The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earl... | 4.0 | — | 2011-03-02 | |
| CVE-2021-36368 | An issue was discovered in OpenSSH before 8.9. If a client is using public-key authentication with agent forwa... | 3.7 | — | 2022-03-13 | |
| CVE-2011-5000 | The ssh_gssapi_parse_ename function in gss-serv.c in OpenSSH 5.8 and earlier, when gssapi-with-mic authenticat... | 3.5 | — | 2012-04-05 | |
| CVE-2005-2666 | SSH, as implemented in OpenSSH before 4.0 and possibly other implementations, stores hostnames, IP addresses,... | 1.2 | — | 2005-08-23 | |
| CVE-2008-3259 | OpenSSH before 5.1 sets the SO_REUSEADDR socket option when the X11UseLocalhost configuration setting is disab... | 1.2 | — | 2008-07-22 |
Отслеживайте эти версии на своих серверах
InfraGuard собирает версии установленного ПО со всех серверов и отмечает версии с известными уязвимостями. Self-hosted — данные не покидают вашу сеть.
Данные: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (об EPSS см. https://www.first.org/epss), endoflife.date. Список ПО: awesome-selfhosted (CC BY-SA 3.0).