Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/openssh@1:4.3p2-9etch3
Typedeb
Namespacedebian
Nameopenssh
Version1:4.3p2-9etch3
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version1:9.2p1-2+deb12u7
Latest_non_vulnerable_version1:9.2p1-2+deb12u7
Affected_by_vulnerabilities
0
url VCID-19z4-v53b-uua4
vulnerability_id VCID-19z4-v53b-uua4
summary The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1908.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1908.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-1908
reference_id
reference_type
scores
0
value 0.02368
scoring_system epss
scoring_elements 0.85265
published_at 2026-06-05T12:55:00Z
1
value 0.02368
scoring_system epss
scoring_elements 0.85241
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-1908
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1908
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1908
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.securitytracker.com/id/1034705
reference_id 1034705
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url http://www.securitytracker.com/id/1034705
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1298741
reference_id 1298741
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=1298741
6
reference_url http://openwall.com/lists/oss-security/2016/01/15/13
reference_id 13
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url http://openwall.com/lists/oss-security/2016/01/15/13
7
reference_url http://www.securityfocus.com/bid/84427
reference_id 84427
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url http://www.securityfocus.com/bid/84427
8
reference_url https://security.gentoo.org/glsa/201612-18
reference_id GLSA-201612-18
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url https://security.gentoo.org/glsa/201612-18
9
reference_url https://anongit.mindrot.org/openssh.git/commit/?id=ed4ce82dbfa8a3a3c8ea6fa0db113c71e234416c
reference_id ?id=ed4ce82dbfa8a3a3c8ea6fa0db113c71e234416c
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url https://anongit.mindrot.org/openssh.git/commit/?id=ed4ce82dbfa8a3a3c8ea6fa0db113c71e234416c
10
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
11
reference_url http://www.openssh.com/txt/release-7.2
reference_id release-7.2
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url http://www.openssh.com/txt/release-7.2
12
reference_url https://access.redhat.com/errata/RHSA-2016:0465
reference_id RHSA-2016:0465
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0465
13
reference_url http://rhn.redhat.com/errata/RHSA-2016-0465.html
reference_id RHSA-2016-0465.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url http://rhn.redhat.com/errata/RHSA-2016-0465.html
14
reference_url https://access.redhat.com/errata/RHSA-2016:0741
reference_id RHSA-2016:0741
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0741
15
reference_url http://rhn.redhat.com/errata/RHSA-2016-0741.html
reference_id RHSA-2016-0741.html
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url http://rhn.redhat.com/errata/RHSA-2016-0741.html
16
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:14:41Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
17
reference_url https://usn.ubuntu.com/2966-1/
reference_id USN-2966-1
reference_type
scores
url https://usn.ubuntu.com/2966-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-1908
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-19z4-v53b-uua4
1
url VCID-1g1a-dx81-fugd
vulnerability_id VCID-1g1a-dx81-fugd
summary The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is configured to read .pam_environment files in user home directories, allows local users to gain privileges by triggering a crafted environment for the /bin/login program, as demonstrated by an LD_PRELOAD environment variable.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8325.json
reference_id
reference_type
scores
0
value 7.0
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-8325.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-8325
reference_id
reference_type
scores
0
value 0.00079
scoring_system epss
scoring_elements 0.23618
published_at 2026-06-05T12:55:00Z
1
value 0.00079
scoring_system epss
scoring_elements 0.23536
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-8325
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8325
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8325
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv2
scoring_elements AV:L/AC:M/Au:S/C:C/I:C/A:C
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.securitytracker.com/id/1036487
reference_id 1036487
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url http://www.securitytracker.com/id/1036487
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1328012
reference_id 1328012
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=1328012
6
reference_url http://www.securityfocus.com/bid/86187
reference_id 86187
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url http://www.securityfocus.com/bid/86187
7
reference_url https://security-tracker.debian.org/tracker/CVE-2015-8325
reference_id CVE-2015-8325
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url https://security-tracker.debian.org/tracker/CVE-2015-8325
8
reference_url https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8325.html
reference_id CVE-2015-8325.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url https://people.canonical.com/~ubuntu-security/cve/2015/CVE-2015-8325.html
9
reference_url http://www.debian.org/security/2016/dsa-3550
reference_id dsa-3550
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url http://www.debian.org/security/2016/dsa-3550
10
reference_url https://security.gentoo.org/glsa/201612-18
reference_id GLSA-201612-18
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url https://security.gentoo.org/glsa/201612-18
11
reference_url https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755
reference_id ?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url https://anongit.mindrot.org/openssh.git/commit/?id=85bdcd7c92fe7ff133bbc4e10a65c91810f88755
12
reference_url https://security.netapp.com/advisory/ntap-20180628-0001/
reference_id ntap-20180628-0001
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url https://security.netapp.com/advisory/ntap-20180628-0001/
13
reference_url https://access.redhat.com/errata/RHSA-2016:2588
reference_id RHSA-2016:2588
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2588
14
reference_url http://rhn.redhat.com/errata/RHSA-2016-2588.html
reference_id RHSA-2016-2588.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url http://rhn.redhat.com/errata/RHSA-2016-2588.html
15
reference_url https://access.redhat.com/errata/RHSA-2017:0641
reference_id RHSA-2017:0641
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0641
16
reference_url http://rhn.redhat.com/errata/RHSA-2017-0641.html
reference_id RHSA-2017-0641.html
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url http://rhn.redhat.com/errata/RHSA-2017-0641.html
17
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-22T14:28:36Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
18
reference_url https://usn.ubuntu.com/2966-1/
reference_id USN-2966-1
reference_type
scores
url https://usn.ubuntu.com/2966-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
purl pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gpxr-fhh7-ubcm
14
vulnerability VCID-jfe9-9b2f-q7g6
15
vulnerability VCID-jpff-x78s-nkhw
16
vulnerability VCID-mwrp-bru4-fbb7
17
vulnerability VCID-pzgw-b5hx-jufb
18
vulnerability VCID-qdj6-v2mm-u3hv
19
vulnerability VCID-rp6w-z4mn-33d4
20
vulnerability VCID-sy27-quy6-fkgj
21
vulnerability VCID-t4xk-zzys-jqa1
22
vulnerability VCID-t9g4-188x-ekbc
23
vulnerability VCID-yf3u-639n-ake8
24
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.0p1-4%252Bdeb7u4
1
url pkg:deb/debian/openssh@1:6.7p1-5%2Bdeb8u4
purl pkg:deb/debian/openssh@1:6.7p1-5%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-fyug-5932-57az
11
vulnerability VCID-gpxr-fhh7-ubcm
12
vulnerability VCID-jfe9-9b2f-q7g6
13
vulnerability VCID-jpff-x78s-nkhw
14
vulnerability VCID-mwrp-bru4-fbb7
15
vulnerability VCID-qdj6-v2mm-u3hv
16
vulnerability VCID-rp6w-z4mn-33d4
17
vulnerability VCID-t4xk-zzys-jqa1
18
vulnerability VCID-t9g4-188x-ekbc
19
vulnerability VCID-yf3u-639n-ake8
20
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.7p1-5%252Bdeb8u4
2
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2015-8325
risk_score 3.1
exploitability 0.5
weighted_severity 6.3
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1g1a-dx81-fugd
2
url VCID-2259-7fuv-2fdj
vulnerability_id VCID-2259-7fuv-2fdj
summary OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15473.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-15473.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-15473
reference_id
reference_type
scores
0
value 0.90356
scoring_system epss
scoring_elements 0.99619
published_at 2026-06-05T12:55:00Z
1
value 0.90356
scoring_system epss
scoring_elements 0.99618
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-15473
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-15473
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.securitytracker.com/id/1041487
reference_id 1041487
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url http://www.securitytracker.com/id/1041487
5
reference_url http://www.securityfocus.com/bid/105140
reference_id 105140
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url http://www.securityfocus.com/bid/105140
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1619063
reference_id 1619063
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1619063
7
reference_url https://usn.ubuntu.com/3809-1/
reference_id 3809-1
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://usn.ubuntu.com/3809-1/
8
reference_url https://www.exploit-db.com/exploits/45210/
reference_id 45210
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://www.exploit-db.com/exploits/45210/
9
reference_url https://www.exploit-db.com/exploits/45233/
reference_id 45233
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://www.exploit-db.com/exploits/45233/
10
reference_url https://www.exploit-db.com/exploits/45939/
reference_id 45939
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://www.exploit-db.com/exploits/45939/
11
reference_url http://www.openwall.com/lists/oss-security/2018/08/15/5
reference_id 5
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url http://www.openwall.com/lists/oss-security/2018/08/15/5
12
reference_url https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0
reference_id 779974d35b4859c07bc3cb8a12c74b43b0a7d1e0
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0
13
reference_url https://bugs.debian.org/906236
reference_id 906236
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://bugs.debian.org/906236
14
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906236
reference_id 906236
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=906236
15
reference_url https://security.archlinux.org/AVG-763
reference_id AVG-763
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-763
16
reference_url https://bugfuzz.com/stuff/ssh-check-username.py
reference_id CVE-2018-15473
reference_type exploit
scores
url https://bugfuzz.com/stuff/ssh-check-username.py
17
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45210.py
reference_id CVE-2018-15473
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45210.py
18
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45233.py
reference_id CVE-2018-15473
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45233.py
19
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45939.py
reference_id CVE-2018-15473
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/45939.py
20
reference_url https://www.debian.org/security/2018/dsa-4280
reference_id dsa-4280
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://www.debian.org/security/2018/dsa-4280
21
reference_url https://security.gentoo.org/glsa/201810-03
reference_id GLSA-201810-03
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://security.gentoo.org/glsa/201810-03
22
reference_url https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html
reference_id msg00022.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://lists.debian.org/debian-lts-announce/2018/08/msg00022.html
23
reference_url https://security.netapp.com/advisory/ntap-20181101-0001/
reference_id ntap-20181101-0001
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://security.netapp.com/advisory/ntap-20181101-0001/
24
reference_url https://access.redhat.com/errata/RHSA-2019:0711
reference_id RHSA-2019:0711
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://access.redhat.com/errata/RHSA-2019:0711
25
reference_url https://access.redhat.com/errata/RHSA-2019:2143
reference_id RHSA-2019:2143
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://access.redhat.com/errata/RHSA-2019:2143
26
reference_url https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011
reference_id SNWLID-2018-0011
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2018-0011
27
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:22:43Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2018-15473
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2259-7fuv-2fdj
3
url VCID-2ux1-mzk1-hbht
vulnerability_id VCID-2ux1-mzk1-hbht
summary Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3115.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-3115.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-3115
reference_id
reference_type
scores
0
value 0.50367
scoring_system epss
scoring_elements 0.97891
published_at 2026-06-04T12:55:00Z
1
value 0.50367
scoring_system epss
scoring_elements 0.97895
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-3115
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3115
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3115
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:S/C:P/I:P/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.securitytracker.com/id/1035249
reference_id 1035249
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://www.securitytracker.com/id/1035249
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1316829
reference_id 1316829
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1316829
6
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178838.html
reference_id 178838.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/178838.html
7
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179924.html
reference_id 179924.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/179924.html
8
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180491.html
reference_id 180491.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-March/180491.html
9
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183101.html
reference_id 183101.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183101.html
10
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183122.html
reference_id 183122.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-April/183122.html
11
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184264.html
reference_id 184264.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184264.html
12
reference_url https://www.exploit-db.com/exploits/39569/
reference_id 39569
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url https://www.exploit-db.com/exploits/39569/
13
reference_url http://seclists.org/fulldisclosure/2016/Mar/46
reference_id 46
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://seclists.org/fulldisclosure/2016/Mar/46
14
reference_url http://seclists.org/fulldisclosure/2016/Mar/47
reference_id 47
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://seclists.org/fulldisclosure/2016/Mar/47
15
reference_url http://www.securityfocus.com/bid/84314
reference_id 84314
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://www.securityfocus.com/bid/84314
16
reference_url https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115
reference_id cve-2016-3115
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url https://github.com/tintinweb/pub/tree/master/pocs/cve-2016-3115
17
reference_url https://github.com/tintinweb/pub/tree/e8fe09e2123f07f09e3f8e34fc4e3e58fe804fd4/pocs/cve-2016-3115
reference_id CVE-2016-3115
reference_type exploit
scores
url https://github.com/tintinweb/pub/tree/e8fe09e2123f07f09e3f8e34fc4e3e58fe804fd4/pocs/cve-2016-3115
18
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/39569.py
reference_id CVE-2016-3115
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/39569.py
19
reference_url https://www.freebsd.org/security/advisories/FreeBSD-SA-16:14.openssh.asc
reference_id FreeBSD-SA-16:14.openssh.asc
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url https://www.freebsd.org/security/advisories/FreeBSD-SA-16:14.openssh.asc
20
reference_url https://security.gentoo.org/glsa/201612-18
reference_id GLSA-201612-18
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url https://security.gentoo.org/glsa/201612-18
21
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
22
reference_url http://packetstormsecurity.com/files/136234/OpenSSH-7.2p1-xauth-Command-Injection-Bypass.html
reference_id OpenSSH-7.2p1-xauth-Command-Injection-Bypass.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://packetstormsecurity.com/files/136234/OpenSSH-7.2p1-xauth-Command-Injection-Bypass.html
23
reference_url http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
reference_id ovmbulletinjul2016-3090546.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
24
reference_url https://access.redhat.com/errata/RHSA-2016:0465
reference_id RHSA-2016:0465
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0465
25
reference_url http://rhn.redhat.com/errata/RHSA-2016-0465.html
reference_id RHSA-2016-0465.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://rhn.redhat.com/errata/RHSA-2016-0465.html
26
reference_url https://access.redhat.com/errata/RHSA-2016:0466
reference_id RHSA-2016:0466
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0466
27
reference_url http://rhn.redhat.com/errata/RHSA-2016-0466.html
reference_id RHSA-2016-0466.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://rhn.redhat.com/errata/RHSA-2016-0466.html
28
reference_url https://bto.bluecoat.com/security-advisory/sa121
reference_id sa121
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url https://bto.bluecoat.com/security-advisory/sa121
29
reference_url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c
reference_id session.c
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c
30
reference_url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c.diff?r1=1.281&r2=1.282&f=h
reference_id session.c.diff?r1=1.281&r2=1.282&f=h
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/session.c.diff?r1=1.281&r2=1.282&f=h
31
reference_url https://usn.ubuntu.com/2966-1/
reference_id USN-2966-1
reference_type
scores
url https://usn.ubuntu.com/2966-1/
32
reference_url http://www.openssh.com/txt/x11fwd.adv
reference_id x11fwd.adv
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:26:37Z/
url http://www.openssh.com/txt/x11fwd.adv
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-3115
risk_score 1.0
exploitability 2.0
weighted_severity 0.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2ux1-mzk1-hbht
4
url VCID-2wag-yq6a-2kg8
vulnerability_id VCID-2wag-yq6a-2kg8
summary The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5600.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5600.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5600
reference_id
reference_type
scores
0
value 0.78359
scoring_system epss
scoring_elements 0.99049
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5600
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5600
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5600
3
reference_url http://www.securitytracker.com/id/1032988
reference_id 1032988
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://www.securitytracker.com/id/1032988
4
reference_url https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12
reference_id 1174-security-advisory-12
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://www.arista.com/en/support/advisories-notices/security-advisories/1174-security-advisory-12
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1245969
reference_id 1245969
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1245969
6
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html
reference_id 162955.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162955.html
7
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html
reference_id 165170.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html
8
reference_url http://openwall.com/lists/oss-security/2015/07/23/4
reference_id 4
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://openwall.com/lists/oss-security/2015/07/23/4
9
reference_url http://www.securityfocus.com/bid/75990
reference_id 75990
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://www.securityfocus.com/bid/75990
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793616
reference_id 793616
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793616
11
reference_url http://www.securityfocus.com/bid/91787
reference_id 91787
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://www.securityfocus.com/bid/91787
12
reference_url http://seclists.org/fulldisclosure/2015/Jul/92
reference_id 92
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://seclists.org/fulldisclosure/2015/Jul/92
13
reference_url http://www.securityfocus.com/bid/92012
reference_id 92012
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://www.securityfocus.com/bid/92012
14
reference_url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c
reference_id auth2-chall.c
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c
15
reference_url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42&r2=1.43&f=h
reference_id auth2-chall.c.diff?r1=1.42&r2=1.43&f=h
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth2-chall.c.diff?r1=1.42&r2=1.43&f=h
16
reference_url https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
reference_id docDisplay?docId=emr_na-c04952480
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952480
17
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992
reference_id docDisplay?docId=emr_na-c05128992
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05128992
18
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
reference_id docDisplay?docId=emr_na-c05157667
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
19
reference_url https://security.gentoo.org/glsa/201512-04
reference_id GLSA-201512-04
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://security.gentoo.org/glsa/201512-04
20
reference_url https://support.apple.com/kb/HT205031
reference_id HT205031
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://support.apple.com/kb/HT205031
21
reference_url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10697
reference_id index?page=content&id=JSA10697
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10697
22
reference_url https://kc.mcafee.com/corporate/index?page=content&id=SB10136
reference_id index?page=content&id=SB10136
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://kc.mcafee.com/corporate/index?page=content&id=SB10136
23
reference_url https://kc.mcafee.com/corporate/index?page=content&id=SB10157
reference_id index?page=content&id=SB10157
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://kc.mcafee.com/corporate/index?page=content&id=SB10157
24
reference_url http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
reference_id msg00001.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html
25
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
26
reference_url http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html
27
reference_url https://security.netapp.com/advisory/ntap-20151106-0001/
reference_id ntap-20151106-0001
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://security.netapp.com/advisory/ntap-20151106-0001/
28
reference_url http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
reference_id ovmbulletinjul2016-3090546.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html
29
reference_url https://access.redhat.com/errata/RHSA-2015:2088
reference_id RHSA-2015:2088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2088
30
reference_url https://access.redhat.com/errata/RHSA-2016:0466
reference_id RHSA-2016:0466
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0466
31
reference_url http://rhn.redhat.com/errata/RHSA-2016-0466.html
reference_id RHSA-2016-0466.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://rhn.redhat.com/errata/RHSA-2016-0466.html
32
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
33
reference_url https://usn.ubuntu.com/2710-1/
reference_id USN-2710-1
reference_type
scores
url https://usn.ubuntu.com/2710-1/
34
reference_url http://www.ubuntu.com/usn/USN-2710-1
reference_id USN-2710-1
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://www.ubuntu.com/usn/USN-2710-1
35
reference_url http://www.ubuntu.com/usn/USN-2710-2
reference_id USN-2710-2
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:31:47Z/
url http://www.ubuntu.com/usn/USN-2710-2
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2015-5600
risk_score 0.3
exploitability 0.5
weighted_severity 0.7
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2wag-yq6a-2kg8
5
url VCID-55nm-g9f8-qfeh
vulnerability_id VCID-55nm-g9f8-qfeh
summary The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1907.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-1907.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-1907
reference_id
reference_type
scores
0
value 0.00538
scoring_system epss
scoring_elements 0.67906
published_at 2026-06-04T12:55:00Z
1
value 0.00538
scoring_system epss
scoring_elements 0.67946
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-1907
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1907
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1907
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1298746
reference_id 1298746
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1298746
4
reference_url https://usn.ubuntu.com/2966-1/
reference_id USN-2966-1
reference_type
scores
url https://usn.ubuntu.com/2966-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-1907
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-55nm-g9f8-qfeh
6
url VCID-7e68-w3cr-z3c4
vulnerability_id VCID-7e68-w3cr-z3c4
summary regression update
references
fixed_packages
0
url pkg:deb/debian/openssh@1:7.9p1-10%2Bdeb10u2
purl pkg:deb/debian/openssh@1:7.9p1-10%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qdj6-v2mm-u3hv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.9p1-10%252Bdeb10u2
aliases DSA-4539-2 openssh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7e68-w3cr-z3c4
7
url VCID-bakg-yahy-qybz
vulnerability_id VCID-bakg-yahy-qybz
summary Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6564.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6564.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-6564
reference_id
reference_type
scores
0
value 0.04032
scoring_system epss
scoring_elements 0.88696
published_at 2026-06-04T12:55:00Z
1
value 0.04139
scoring_system epss
scoring_elements 0.88862
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-6564
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6564
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6564
3
reference_url http://www.openwall.com/lists/oss-security/2015/08/22/1
reference_id 1
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url http://www.openwall.com/lists/oss-security/2015/08/22/1
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1252852
reference_id 1252852
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1252852
5
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html
reference_id 165170.html
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html
6
reference_url http://seclists.org/fulldisclosure/2015/Aug/54
reference_id 54
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url http://seclists.org/fulldisclosure/2015/Aug/54
7
reference_url https://github.com/openssh/openssh-portable/commit/5e75f5198769056089fb06c4d738ab0e5abc66f7
reference_id 5e75f5198769056089fb06c4d738ab0e5abc66f7
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url https://github.com/openssh/openssh-portable/commit/5e75f5198769056089fb06c4d738ab0e5abc66f7
8
reference_url http://www.securityfocus.com/bid/76317
reference_id 76317
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url http://www.securityfocus.com/bid/76317
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795711
reference_id 795711
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795711
10
reference_url https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-764
reference_id brocade-security-advisory-2019-764
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-764
11
reference_url https://security.gentoo.org/glsa/201512-04
reference_id GLSA-201512-04
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url https://security.gentoo.org/glsa/201512-04
12
reference_url https://kc.mcafee.com/corporate/index?page=content&id=SB10136
reference_id index?page=content&id=SB10136
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url https://kc.mcafee.com/corporate/index?page=content&id=SB10136
13
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
14
reference_url http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html
15
reference_url http://www.openssh.com/txt/release-7.0
reference_id release-7.0
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url http://www.openssh.com/txt/release-7.0
16
reference_url https://access.redhat.com/errata/RHSA-2015:2088
reference_id RHSA-2015:2088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2088
17
reference_url https://access.redhat.com/errata/RHSA-2016:0741
reference_id RHSA-2016:0741
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0741
18
reference_url http://rhn.redhat.com/errata/RHSA-2016-0741.html
reference_id RHSA-2016-0741.html
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url http://rhn.redhat.com/errata/RHSA-2016-0741.html
19
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:18:01Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2015-6564
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bakg-yahy-qybz
8
url VCID-d8zj-qfhp-tycr
vulnerability_id VCID-d8zj-qfhp-tycr
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-20685.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-20685
reference_id
reference_type
scores
0
value 0.03377
scoring_system epss
scoring_elements 0.87598
published_at 2026-06-04T12:55:00Z
1
value 0.03377
scoring_system epss
scoring_elements 0.87619
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-20685
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6109
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6109
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.securityfocus.com/bid/106531
reference_id 106531
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url http://www.securityfocus.com/bid/106531
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1665785
reference_id 1665785
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1665785
8
reference_url https://usn.ubuntu.com/3885-1/
reference_id 3885-1
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://usn.ubuntu.com/3885-1/
9
reference_url https://github.com/openssh/openssh-portable/commit/6010c0303a422a9c5fa8860c061bf7105eb7f8b2
reference_id 6010c0303a422a9c5fa8860c061bf7105eb7f8b2
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://github.com/openssh/openssh-portable/commit/6010c0303a422a9c5fa8860c061bf7105eb7f8b2
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919101
reference_id 919101
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=919101
11
reference_url https://security.archlinux.org/ASA-201904-11
reference_id ASA-201904-11
reference_type
scores
url https://security.archlinux.org/ASA-201904-11
12
reference_url https://security.archlinux.org/AVG-951
reference_id AVG-951
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-951
13
reference_url https://www.debian.org/security/2019/dsa-4387
reference_id dsa-4387
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://www.debian.org/security/2019/dsa-4387
14
reference_url https://security.gentoo.org/glsa/201903-16
reference_id GLSA-201903-16
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://security.gentoo.org/glsa/201903-16
15
reference_url https://security.gentoo.org/glsa/202007-53
reference_id GLSA-202007-53
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://security.gentoo.org/glsa/202007-53
16
reference_url https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html
reference_id msg00030.html
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html
17
reference_url https://security.netapp.com/advisory/ntap-20190215-0001/
reference_id ntap-20190215-0001
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://security.netapp.com/advisory/ntap-20190215-0001/
18
reference_url https://access.redhat.com/errata/RHSA-2019:3702
reference_id RHSA-2019:3702
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://access.redhat.com/errata/RHSA-2019:3702
19
reference_url https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/scp.c.diff?r1=1.197&r2=1.198&f=h
reference_id scp.c.diff?r1=1.197&r2=1.198&f=h
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/scp.c.diff?r1=1.197&r2=1.198&f=h
20
reference_url https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
reference_id scp-client-multiple-vulnerabilities.txt
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
21
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-17T21:53:24Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
1
url pkg:deb/debian/openssh@1:7.9p1-10%2Bdeb10u2
purl pkg:deb/debian/openssh@1:7.9p1-10%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qdj6-v2mm-u3hv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.9p1-10%252Bdeb10u2
aliases CVE-2018-20685
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d8zj-qfhp-tycr
9
url VCID-dk46-7un2-z3bw
vulnerability_id VCID-dk46-7un2-z3bw
summary Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modules by leveraging control over a forwarded agent-socket.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10009.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-10009
reference_id
reference_type
scores
0
value 0.01579
scoring_system epss
scoring_elements 0.81939
published_at 2026-06-05T12:55:00Z
1
value 0.01579
scoring_system epss
scoring_elements 0.81905
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-10009
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10009
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:S/C:P/I:P/A:P
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.openwall.com/lists/oss-security/2023/07/20/1
reference_id 1
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://www.openwall.com/lists/oss-security/2023/07/20/1
5
reference_url http://www.securitytracker.com/id/1037490
reference_id 1037490
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://www.securitytracker.com/id/1037490
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1406269
reference_id 1406269
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1406269
7
reference_url http://www.openwall.com/lists/oss-security/2016/12/19/2
reference_id 2
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://www.openwall.com/lists/oss-security/2016/12/19/2
8
reference_url http://seclists.org/fulldisclosure/2023/Jul/31
reference_id 31
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://seclists.org/fulldisclosure/2023/Jul/31
9
reference_url https://usn.ubuntu.com/3538-1/
reference_id 3538-1
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://usn.ubuntu.com/3538-1/
10
reference_url https://www.exploit-db.com/exploits/40963/
reference_id 40963
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://www.exploit-db.com/exploits/40963/
11
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848714
reference_id 848714
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848714
12
reference_url http://www.openwall.com/lists/oss-security/2023/07/19/9
reference_id 9
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://www.openwall.com/lists/oss-security/2023/07/19/9
13
reference_url https://github.com/openbsd/src/commit/9476ce1dd37d3c3218d5640b74c34c65e5f4efe5
reference_id 9476ce1dd37d3c3218d5640b74c34c65e5f4efe5
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://github.com/openbsd/src/commit/9476ce1dd37d3c3218d5640b74c34c65e5f4efe5
14
reference_url http://www.securityfocus.com/bid/94968
reference_id 94968
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://www.securityfocus.com/bid/94968
15
reference_url https://security.archlinux.org/ASA-201612-20
reference_id ASA-201612-20
reference_type
scores
url https://security.archlinux.org/ASA-201612-20
16
reference_url https://security.archlinux.org/AVG-110
reference_id AVG-110
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-110
17
reference_url https://bugs.chromium.org/p/project-zero/issues/detail?id=1009
reference_id CVE-2016-10009
reference_type exploit
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://bugs.chromium.org/p/project-zero/issues/detail?id=1009
18
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40963.txt
reference_id CVE-2016-10009
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40963.txt
19
reference_url https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
reference_id display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
20
reference_url https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc
reference_id FreeBSD-SA-17:01.openssh.asc
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc
21
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
22
reference_url https://security.netapp.com/advisory/ntap-20171130-0002/
reference_id ntap-20171130-0002
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://security.netapp.com/advisory/ntap-20171130-0002/
23
reference_url http://packetstormsecurity.com/files/140261/OpenSSH-Arbitrary-Library-Loading.html
reference_id OpenSSH-Arbitrary-Library-Loading.html
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://packetstormsecurity.com/files/140261/OpenSSH-Arbitrary-Library-Loading.html
24
reference_url http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html
reference_id OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://packetstormsecurity.com/files/173661/OpenSSH-Forwarded-SSH-Agent-Remote-Code-Execution.html
25
reference_url https://www.openssh.com/txt/release-7.4
reference_id release-7.4
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://www.openssh.com/txt/release-7.4
26
reference_url https://access.redhat.com/errata/RHSA-2017:2029
reference_id RHSA-2017:2029
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://access.redhat.com/errata/RHSA-2017:2029
27
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
28
reference_url http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
reference_id viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
reference_type
scores
0
value 7.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:23:45Z/
url http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-10009
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-dk46-7un2-z3bw
10
url VCID-eeca-d7xg-dqfj
vulnerability_id VCID-eeca-d7xg-dqfj
summary The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet data that provides a crafted callback address.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4548.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4548.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4548
reference_id
reference_type
scores
0
value 0.00305
scoring_system epss
scoring_elements 0.5407
published_at 2026-06-04T12:55:00Z
1
value 0.00305
scoring_system epss
scoring_elements 0.54126
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4548
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4548
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4548
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1028418
reference_id 1028418
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1028418
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729029
reference_id 729029
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729029
5
reference_url https://usn.ubuntu.com/2014-1/
reference_id USN-2014-1
reference_type
scores
url https://usn.ubuntu.com/2014-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:6.6p1-4~bpo70%2B1
purl pkg:deb/debian/openssh@1:6.6p1-4~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-fr4t-rqsq-pbfu
11
vulnerability VCID-fyug-5932-57az
12
vulnerability VCID-gpxr-fhh7-ubcm
13
vulnerability VCID-jfe9-9b2f-q7g6
14
vulnerability VCID-jpff-x78s-nkhw
15
vulnerability VCID-mwrp-bru4-fbb7
16
vulnerability VCID-qdj6-v2mm-u3hv
17
vulnerability VCID-rp6w-z4mn-33d4
18
vulnerability VCID-t4xk-zzys-jqa1
19
vulnerability VCID-t9g4-188x-ekbc
20
vulnerability VCID-yf3u-639n-ake8
21
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.6p1-4~bpo70%252B1
aliases CVE-2013-4548
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eeca-d7xg-dqfj
11
url VCID-fg38-qrgb-tqgd
vulnerability_id VCID-fg38-qrgb-tqgd
summary packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4925.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4925.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-4925
reference_id
reference_type
scores
0
value 0.03372
scoring_system epss
scoring_elements 0.87587
published_at 2026-06-04T12:55:00Z
1
value 0.03372
scoring_system epss
scoring_elements 0.87609
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-4925
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4925
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4925
fixed_packages
0
url pkg:deb/debian/openssh@1:5.1p1-5
purl pkg:deb/debian/openssh@1:5.1p1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gp9q-a913-gyhq
14
vulnerability VCID-gpxr-fhh7-ubcm
15
vulnerability VCID-jfe9-9b2f-q7g6
16
vulnerability VCID-jpff-x78s-nkhw
17
vulnerability VCID-kdeq-2yyr-hkg9
18
vulnerability VCID-mwrp-bru4-fbb7
19
vulnerability VCID-pzgw-b5hx-jufb
20
vulnerability VCID-qdj6-v2mm-u3hv
21
vulnerability VCID-rp6w-z4mn-33d4
22
vulnerability VCID-sy27-quy6-fkgj
23
vulnerability VCID-t4xk-zzys-jqa1
24
vulnerability VCID-t9g4-188x-ekbc
25
vulnerability VCID-yf3u-639n-ake8
26
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:5.1p1-5
aliases CVE-2006-4925
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fg38-qrgb-tqgd
12
url VCID-fr4t-rqsq-pbfu
vulnerability_id VCID-fr4t-rqsq-pbfu
summary The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0777.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0777.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0777
reference_id
reference_type
scores
0
value 0.71658
scoring_system epss
scoring_elements 0.98752
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0777
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0778
4
reference_url http://www.securitytracker.com/id/1034671
reference_id 1034671
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://www.securitytracker.com/id/1034671
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1298032
reference_id 1298032
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1298032
6
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html
reference_id 175592.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175592.html
7
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html
reference_id 175676.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/175676.html
8
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html
reference_id 176349.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html
9
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html
reference_id 176516.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html
10
reference_url http://seclists.org/fulldisclosure/2016/Jan/44
reference_id 44
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://seclists.org/fulldisclosure/2016/Jan/44
11
reference_url http://www.openwall.com/lists/oss-security/2016/01/14/7
reference_id 7
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://www.openwall.com/lists/oss-security/2016/01/14/7
12
reference_url http://www.securityfocus.com/bid/80695
reference_id 80695
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://www.securityfocus.com/bid/80695
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=810984
reference_id 810984
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=810984
14
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375
reference_id docDisplay?docId=emr_na-c05247375
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375
15
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
reference_id docDisplay?docId=emr_na-c05356388
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
16
reference_url http://www.debian.org/security/2016/dsa-3446
reference_id dsa-3446
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://www.debian.org/security/2016/dsa-3446
17
reference_url https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc
reference_id FreeBSD-SA-16:07.openssh.asc
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url https://security.FreeBSD.org/advisories/FreeBSD-SA-16:07.openssh.asc
18
reference_url https://security.gentoo.org/glsa/201601-01
reference_id GLSA-201601-01
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url https://security.gentoo.org/glsa/201601-01
19
reference_url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734
reference_id index?page=content&id=JSA10734
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734
20
reference_url http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
reference_id linuxbulletinjan2016-2867209.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
21
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html
reference_id msg00006.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html
22
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html
reference_id msg00007.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html
23
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html
reference_id msg00008.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html
24
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html
reference_id msg00009.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html
25
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html
reference_id msg00013.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html
26
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html
reference_id msg00014.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html
27
reference_url http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html
reference_id Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html
28
reference_url http://www.openssh.com/txt/release-7.1p2
reference_id release-7.1p2
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://www.openssh.com/txt/release-7.1p2
29
reference_url https://access.redhat.com/errata/RHSA-2016:0043
reference_id RHSA-2016:0043
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0043
30
reference_url https://bto.bluecoat.com/security-advisory/sa109
reference_id sa109
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url https://bto.bluecoat.com/security-advisory/sa109
31
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
32
reference_url http://www.securityfocus.com/archive/1/537295/100/0/threaded
reference_id threaded
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://www.securityfocus.com/archive/1/537295/100/0/threaded
33
reference_url https://usn.ubuntu.com/2869-1/
reference_id USN-2869-1
reference_type
scores
url https://usn.ubuntu.com/2869-1/
34
reference_url http://www.ubuntu.com/usn/USN-2869-1
reference_id USN-2869-1
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url http://www.ubuntu.com/usn/USN-2869-1
35
reference_url https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/
reference_id utm-up2date-9-319-released
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/
36
reference_url https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/
reference_id utm-up2date-9-354-released
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:29:54Z/
url https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/
fixed_packages
0
url pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
purl pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gpxr-fhh7-ubcm
14
vulnerability VCID-jfe9-9b2f-q7g6
15
vulnerability VCID-jpff-x78s-nkhw
16
vulnerability VCID-mwrp-bru4-fbb7
17
vulnerability VCID-pzgw-b5hx-jufb
18
vulnerability VCID-qdj6-v2mm-u3hv
19
vulnerability VCID-rp6w-z4mn-33d4
20
vulnerability VCID-sy27-quy6-fkgj
21
vulnerability VCID-t4xk-zzys-jqa1
22
vulnerability VCID-t9g4-188x-ekbc
23
vulnerability VCID-yf3u-639n-ake8
24
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.0p1-4%252Bdeb7u4
1
url pkg:deb/debian/openssh@1:6.7p1-5%2Bdeb8u4
purl pkg:deb/debian/openssh@1:6.7p1-5%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-fyug-5932-57az
11
vulnerability VCID-gpxr-fhh7-ubcm
12
vulnerability VCID-jfe9-9b2f-q7g6
13
vulnerability VCID-jpff-x78s-nkhw
14
vulnerability VCID-mwrp-bru4-fbb7
15
vulnerability VCID-qdj6-v2mm-u3hv
16
vulnerability VCID-rp6w-z4mn-33d4
17
vulnerability VCID-t4xk-zzys-jqa1
18
vulnerability VCID-t9g4-188x-ekbc
19
vulnerability VCID-yf3u-639n-ake8
20
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.7p1-5%252Bdeb8u4
aliases CVE-2016-0777
risk_score 0.3
exploitability 0.5
weighted_severity 0.6
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fr4t-rqsq-pbfu
13
url VCID-fy7d-81ah-fug2
vulnerability_id VCID-fy7d-81ah-fug2
summary OpenSSH 4.3p2, and probably other versions, allows local users to hijack forwarded X connections by causing ssh to set DISPLAY to :10, even when another process is listening on the associated port, as demonstrated by opening TCP port 6010 (IPv4) and sniffing a cookie sent by Emacs.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1483.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1483.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-1483
reference_id
reference_type
scores
0
value 0.00201
scoring_system epss
scoring_elements 0.42079
published_at 2026-06-04T12:55:00Z
1
value 0.00201
scoring_system epss
scoring_elements 0.42153
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-1483
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1483
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=439079
reference_id 439079
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=439079
5
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011
reference_id 463011
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=463011
6
reference_url https://security.gentoo.org/glsa/200804-03
reference_id GLSA-200804-03
reference_type
scores
url https://security.gentoo.org/glsa/200804-03
7
reference_url https://access.redhat.com/errata/RHSA-2005:527
reference_id RHSA-2005:527
reference_type
scores
url https://access.redhat.com/errata/RHSA-2005:527
8
reference_url https://usn.ubuntu.com/597-1/
reference_id USN-597-1
reference_type
scores
url https://usn.ubuntu.com/597-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:5.1p1-5
purl pkg:deb/debian/openssh@1:5.1p1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gp9q-a913-gyhq
14
vulnerability VCID-gpxr-fhh7-ubcm
15
vulnerability VCID-jfe9-9b2f-q7g6
16
vulnerability VCID-jpff-x78s-nkhw
17
vulnerability VCID-kdeq-2yyr-hkg9
18
vulnerability VCID-mwrp-bru4-fbb7
19
vulnerability VCID-pzgw-b5hx-jufb
20
vulnerability VCID-qdj6-v2mm-u3hv
21
vulnerability VCID-rp6w-z4mn-33d4
22
vulnerability VCID-sy27-quy6-fkgj
23
vulnerability VCID-t4xk-zzys-jqa1
24
vulnerability VCID-t9g4-188x-ekbc
25
vulnerability VCID-yf3u-639n-ake8
26
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:5.1p1-5
aliases CVE-2008-1483
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fy7d-81ah-fug2
14
url VCID-fyug-5932-57az
vulnerability_id VCID-fyug-5932-57az
summary sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10708.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10708.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-10708
reference_id
reference_type
scores
0
value 0.0312
scoring_system epss
scoring_elements 0.87106
published_at 2026-06-05T12:55:00Z
1
value 0.0312
scoring_system epss
scoring_elements 0.87084
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-10708
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10708
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10708
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.securityfocus.com/bid/102780
reference_id 102780
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url http://www.securityfocus.com/bid/102780
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1537929
reference_id 1537929
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1537929
6
reference_url https://usn.ubuntu.com/3809-1/
reference_id 3809-1
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url https://usn.ubuntu.com/3809-1/
7
reference_url http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html
reference_id fuzzing-tcp-servers.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url http://blog.swiecki.net/2018/01/fuzzing-tcp-servers.html
8
reference_url https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737
reference_id ?id=28652bca29046f62c7045e933e6b931de1d16737
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737
9
reference_url https://support.f5.com/csp/article/K32485746?utm_source=f5support&amp%3Butm_medium=RSS
reference_id K32485746?utm_source=f5support&amp%3Butm_medium=RSS
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url https://support.f5.com/csp/article/K32485746?utm_source=f5support&amp%3Butm_medium=RSS
10
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
11
reference_url https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html
reference_id msg00031.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url https://lists.debian.org/debian-lts-announce/2018/01/msg00031.html
12
reference_url https://security.netapp.com/advisory/ntap-20180423-0003/
reference_id ntap-20180423-0003
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url https://security.netapp.com/advisory/ntap-20180423-0003/
13
reference_url https://www.openssh.com/releasenotes.html
reference_id releasenotes.html
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url https://www.openssh.com/releasenotes.html
14
reference_url https://access.redhat.com/errata/RHSA-2017:2029
reference_id RHSA-2017:2029
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:2029
15
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf
reference_id ssa-676336.pdf
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-04-28T15:50:42Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-10708
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fyug-5932-57az
15
url VCID-gp9q-a913-gyhq
vulnerability_id VCID-gp9q-a913-gyhq
summary The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0539.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-0539.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-0539
reference_id
reference_type
scores
0
value 0.02075
scoring_system epss
scoring_elements 0.84271
published_at 2026-06-04T12:55:00Z
1
value 0.02075
scoring_system epss
scoring_elements 0.84294
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-0539
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0539
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0539
3
reference_url http://www.vupen.com/english/advisories/2011/0284
reference_id 0284
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://www.vupen.com/english/advisories/2011/0284
4
reference_url http://www.openwall.com/lists/oss-security/2011/02/04/2
reference_id 2
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://www.openwall.com/lists/oss-security/2011/02/04/2
5
reference_url http://secunia.com/advisories/43181
reference_id 43181
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://secunia.com/advisories/43181
6
reference_url http://secunia.com/advisories/44269
reference_id 44269
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://secunia.com/advisories/44269
7
reference_url http://www.securityfocus.com/bid/46155
reference_id 46155
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://www.securityfocus.com/bid/46155
8
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/65163
reference_id 65163
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url https://exchange.xforce.ibmcloud.com/vulnerabilities/65163
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=675254
reference_id 675254
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=675254
10
reference_url http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777
reference_id Document.jsp?objectID=c02794777
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02794777
11
reference_url http://www.securitytracker.com/id?1025028
reference_id id?1025028
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://www.securitytracker.com/id?1025028
12
reference_url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
reference_id index?page=content&id=JSA10673
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
13
reference_url http://www.openssh.com/txt/legacy-cert.adv
reference_id legacy-cert.adv
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:34:38Z/
url http://www.openssh.com/txt/legacy-cert.adv
fixed_packages
0
url pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
purl pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gpxr-fhh7-ubcm
14
vulnerability VCID-jfe9-9b2f-q7g6
15
vulnerability VCID-jpff-x78s-nkhw
16
vulnerability VCID-mwrp-bru4-fbb7
17
vulnerability VCID-pzgw-b5hx-jufb
18
vulnerability VCID-qdj6-v2mm-u3hv
19
vulnerability VCID-rp6w-z4mn-33d4
20
vulnerability VCID-sy27-quy6-fkgj
21
vulnerability VCID-t4xk-zzys-jqa1
22
vulnerability VCID-t9g4-188x-ekbc
23
vulnerability VCID-yf3u-639n-ake8
24
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.0p1-4%252Bdeb7u4
aliases CVE-2011-0539
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gp9q-a913-gyhq
16
url VCID-gpxr-fhh7-ubcm
vulnerability_id VCID-gpxr-fhh7-ubcm
summary sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to gain privileges via unspecified vectors, related to serverloop.c.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10010.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10010.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-10010
reference_id
reference_type
scores
0
value 0.00087
scoring_system epss
scoring_elements 0.24988
published_at 2026-06-05T12:55:00Z
1
value 0.00087
scoring_system epss
scoring_elements 0.24893
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-10010
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10010
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:S/C:C/I:C/A:C
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.securitytracker.com/id/1037490
reference_id 1037490
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url http://www.securitytracker.com/id/1037490
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1406278
reference_id 1406278
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1406278
6
reference_url http://www.openwall.com/lists/oss-security/2016/12/19/2
reference_id 2
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url http://www.openwall.com/lists/oss-security/2016/12/19/2
7
reference_url https://www.exploit-db.com/exploits/40962/
reference_id 40962
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url https://www.exploit-db.com/exploits/40962/
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848715
reference_id 848715
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848715
9
reference_url http://www.securityfocus.com/bid/94972
reference_id 94972
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url http://www.securityfocus.com/bid/94972
10
reference_url https://security.archlinux.org/ASA-201612-20
reference_id ASA-201612-20
reference_type
scores
url https://security.archlinux.org/ASA-201612-20
11
reference_url https://security.archlinux.org/AVG-110
reference_id AVG-110
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-110
12
reference_url https://github.com/openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce
reference_id c76fac666ea038753294f2ac94d310f8adece9ce
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url https://github.com/openbsd/src/commit/c76fac666ea038753294f2ac94d310f8adece9ce
13
reference_url https://bugs.chromium.org/p/project-zero/issues/detail?id=1010
reference_id CVE-2016-10010
reference_type exploit
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url https://bugs.chromium.org/p/project-zero/issues/detail?id=1010
14
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40962.txt
reference_id CVE-2016-10010
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/local/40962.txt
15
reference_url https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
reference_id display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
16
reference_url https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc
reference_id FreeBSD-SA-17:01.openssh.asc
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url https://security.FreeBSD.org/advisories/FreeBSD-SA-17:01.openssh.asc
17
reference_url https://security.netapp.com/advisory/ntap-20171130-0002/
reference_id ntap-20171130-0002
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url https://security.netapp.com/advisory/ntap-20171130-0002/
18
reference_url http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html
reference_id OpenSSH-Local-Privilege-Escalation.html
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url http://packetstormsecurity.com/files/140262/OpenSSH-Local-Privilege-Escalation.html
19
reference_url https://www.openssh.com/txt/release-7.4
reference_id release-7.4
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url https://www.openssh.com/txt/release-7.4
20
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
21
reference_url http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
reference_id viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
reference_type
scores
0
value 7
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:22:39Z/
url http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-10010
risk_score 10.0
exploitability 2.0
weighted_severity 6.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gpxr-fhh7-ubcm
17
url VCID-h4q6-qj3x-p3cw
vulnerability_id VCID-h4q6-qj3x-p3cw
summary ssh in OpenSSH before 4.7 does not properly handle when an untrusted cookie cannot be created and uses a trusted X11 cookie instead, which allows attackers to violate intended policy and gain privileges by causing an X client to be treated as trusted.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4752.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4752.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-4752
reference_id
reference_type
scores
0
value 0.02269
scoring_system epss
scoring_elements 0.84943
published_at 2026-06-04T12:55:00Z
1
value 0.02269
scoring_system epss
scoring_elements 0.84967
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-4752
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4752
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4752
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=280361
reference_id 280361
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=280361
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444738
reference_id 444738
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444738
5
reference_url https://security.gentoo.org/glsa/200711-02
reference_id GLSA-200711-02
reference_type
scores
url https://security.gentoo.org/glsa/200711-02
6
reference_url https://access.redhat.com/errata/RHSA-2008:0855
reference_id RHSA-2008:0855
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0855
7
reference_url https://usn.ubuntu.com/566-1/
reference_id USN-566-1
reference_type
scores
url https://usn.ubuntu.com/566-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:5.1p1-5
purl pkg:deb/debian/openssh@1:5.1p1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gp9q-a913-gyhq
14
vulnerability VCID-gpxr-fhh7-ubcm
15
vulnerability VCID-jfe9-9b2f-q7g6
16
vulnerability VCID-jpff-x78s-nkhw
17
vulnerability VCID-kdeq-2yyr-hkg9
18
vulnerability VCID-mwrp-bru4-fbb7
19
vulnerability VCID-pzgw-b5hx-jufb
20
vulnerability VCID-qdj6-v2mm-u3hv
21
vulnerability VCID-rp6w-z4mn-33d4
22
vulnerability VCID-sy27-quy6-fkgj
23
vulnerability VCID-t4xk-zzys-jqa1
24
vulnerability VCID-t9g4-188x-ekbc
25
vulnerability VCID-yf3u-639n-ake8
26
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:5.1p1-5
aliases CVE-2007-4752
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h4q6-qj3x-p3cw
18
url VCID-jfe9-9b2f-q7g6
vulnerability_id VCID-jfe9-9b2f-q7g6
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6111.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-6111
reference_id
reference_type
scores
0
value 0.54213
scoring_system epss
scoring_elements 0.98063
published_at 2026-06-04T12:55:00Z
1
value 0.54213
scoring_system epss
scoring_elements 0.98065
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-6111
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6109
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6109
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url http://www.openwall.com/lists/oss-security/2019/04/18/1
reference_id 1
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url http://www.openwall.com/lists/oss-security/2019/04/18/1
7
reference_url http://www.openwall.com/lists/oss-security/2022/08/02/1
reference_id 1
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url http://www.openwall.com/lists/oss-security/2022/08/02/1
8
reference_url http://www.securityfocus.com/bid/106741
reference_id 106741
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url http://www.securityfocus.com/bid/106741
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1666127
reference_id 1666127
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1666127
10
reference_url https://usn.ubuntu.com/3885-1/
reference_id 3885-1
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://usn.ubuntu.com/3885-1/
11
reference_url https://usn.ubuntu.com/3885-2/
reference_id 3885-2
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://usn.ubuntu.com/3885-2/
12
reference_url https://www.exploit-db.com/exploits/46193/
reference_id 46193
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://www.exploit-db.com/exploits/46193/
13
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923486
reference_id 923486
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923486
14
reference_url https://security.archlinux.org/ASA-201904-11
reference_id ASA-201904-11
reference_type
scores
url https://security.archlinux.org/ASA-201904-11
15
reference_url https://security.archlinux.org/AVG-951
reference_id AVG-951
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-951
16
reference_url https://lists.apache.org/thread.html/c45d9bc90700354b58fb7455962873c44229841880dcb64842fa7d23%40%3Cdev.mina.apache.org%3E
reference_id c45d9bc90700354b58fb7455962873c44229841880dcb64842fa7d23%40%3Cdev.mina.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://lists.apache.org/thread.html/c45d9bc90700354b58fb7455962873c44229841880dcb64842fa7d23%40%3Cdev.mina.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/c7301cab36a86825359e1b725fc40304d1df56dc6d107c1fe885148b%40%3Cdev.mina.apache.org%3E
reference_id c7301cab36a86825359e1b725fc40304d1df56dc6d107c1fe885148b%40%3Cdev.mina.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://lists.apache.org/thread.html/c7301cab36a86825359e1b725fc40304d1df56dc6d107c1fe885148b%40%3Cdev.mina.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/d540139359de999b0f1c87d05b715be4d7d4bec771e1ae55153c5c7a%40%3Cdev.mina.apache.org%3E
reference_id d540139359de999b0f1c87d05b715be4d7d4bec771e1ae55153c5c7a%40%3Cdev.mina.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://lists.apache.org/thread.html/d540139359de999b0f1c87d05b715be4d7d4bec771e1ae55153c5c7a%40%3Cdev.mina.apache.org%3E
19
reference_url https://www.debian.org/security/2019/dsa-4387
reference_id dsa-4387
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://www.debian.org/security/2019/dsa-4387
20
reference_url https://lists.apache.org/thread.html/e47597433b351d6e01a5d68d610b4ba195743def9730e49561e8cf3f%40%3Cdev.mina.apache.org%3E
reference_id e47597433b351d6e01a5d68d610b4ba195743def9730e49561e8cf3f%40%3Cdev.mina.apache.org%3E
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://lists.apache.org/thread.html/e47597433b351d6e01a5d68d610b4ba195743def9730e49561e8cf3f%40%3Cdev.mina.apache.org%3E
21
reference_url https://www.freebsd.org/security/advisories/FreeBSD-EN-19:10.scp.asc
reference_id FreeBSD-EN-19:10.scp.asc
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://www.freebsd.org/security/advisories/FreeBSD-EN-19:10.scp.asc
22
reference_url https://security.gentoo.org/glsa/201903-16
reference_id GLSA-201903-16
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://security.gentoo.org/glsa/201903-16
23
reference_url https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html
reference_id msg00030.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html
24
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html
reference_id msg00058.html
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html
25
reference_url https://security.netapp.com/advisory/ntap-20190213-0001/
reference_id ntap-20190213-0001
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://security.netapp.com/advisory/ntap-20190213-0001/
26
reference_url https://access.redhat.com/errata/RHSA-2019:3702
reference_id RHSA-2019:3702
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://access.redhat.com/errata/RHSA-2019:3702
27
reference_url https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
reference_id scp.c
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
28
reference_url https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
reference_id scp-client-multiple-vulnerabilities.txt
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
29
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1677794
reference_id show_bug.cgi?id=1677794
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=1677794
30
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
31
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G/
reference_id W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-12-18T14:34:56Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G/
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
1
url pkg:deb/debian/openssh@1:7.9p1-10%2Bdeb10u2
purl pkg:deb/debian/openssh@1:7.9p1-10%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qdj6-v2mm-u3hv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.9p1-10%252Bdeb10u2
aliases CVE-2019-6111
risk_score 10.0
exploitability 2.0
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jfe9-9b2f-q7g6
19
url VCID-jpff-x78s-nkhw
vulnerability_id VCID-jpff-x78s-nkhw
summary authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtain sensitive private-key information by leveraging access to a privilege-separated child process.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json
reference_id
reference_type
scores
0
value 2.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-10011.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-10011
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.03044
published_at 2026-06-05T12:55:00Z
1
value 0.00015
scoring_system epss
scoring_elements 0.03033
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-10011
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10011
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 1
scoring_system cvssv2
scoring_elements AV:L/AC:H/Au:S/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.securitytracker.com/id/1037490
reference_id 1037490
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url http://www.securitytracker.com/id/1037490
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1406286
reference_id 1406286
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1406286
6
reference_url http://www.openwall.com/lists/oss-security/2016/12/19/2
reference_id 2
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url http://www.openwall.com/lists/oss-security/2016/12/19/2
7
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848716
reference_id 848716
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=848716
8
reference_url http://www.securityfocus.com/bid/94977
reference_id 94977
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url http://www.securityfocus.com/bid/94977
9
reference_url https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9
reference_id ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url https://github.com/openbsd/src/commit/ac8147a06ed2e2403fb6b9a0c03e618a9333c0e9
10
reference_url https://security.archlinux.org/ASA-201612-20
reference_id ASA-201612-20
reference_type
scores
url https://security.archlinux.org/ASA-201612-20
11
reference_url https://security.archlinux.org/AVG-110
reference_id AVG-110
reference_type
scores
0
value Medium
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-110
12
reference_url https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
reference_id display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbux03818en_us
13
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
14
reference_url https://security.netapp.com/advisory/ntap-20171130-0002/
reference_id ntap-20171130-0002
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url https://security.netapp.com/advisory/ntap-20171130-0002/
15
reference_url https://www.openssh.com/txt/release-7.4
reference_id release-7.4
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url https://www.openssh.com/txt/release-7.4
16
reference_url https://access.redhat.com/errata/RHSA-2017:2029
reference_id RHSA-2017:2029
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url https://access.redhat.com/errata/RHSA-2017:2029
17
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
18
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf
reference_id ssa-676336.pdf
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-676336.pdf
19
reference_url http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
reference_id viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:19:02Z/
url http://www.slackware.com/security/viewer.php?l=slackware-security&y=2016&m=slackware-security.647637
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-10011
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jpff-x78s-nkhw
20
url VCID-kdeq-2yyr-hkg9
vulnerability_id VCID-kdeq-2yyr-hkg9
summary The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0814.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0814.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-0814
reference_id
reference_type
scores
0
value 0.00275
scoring_system epss
scoring_elements 0.5119
published_at 2026-06-04T12:55:00Z
1
value 0.00275
scoring_system epss
scoring_elements 0.51252
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-0814
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0814
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0814
3
reference_url http://openwall.com/lists/oss-security/2012/01/27/1
reference_id 1
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://openwall.com/lists/oss-security/2012/01/27/1
4
reference_url http://openwall.com/lists/oss-security/2012/01/26/15
reference_id 15
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://openwall.com/lists/oss-security/2012/01/26/15
5
reference_url http://openwall.com/lists/oss-security/2012/01/26/16
reference_id 16
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://openwall.com/lists/oss-security/2012/01/26/16
6
reference_url http://openwall.com/lists/oss-security/2012/01/27/4
reference_id 4
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://openwall.com/lists/oss-security/2012/01/27/4
7
reference_url http://www.securityfocus.com/bid/51702
reference_id 51702
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://www.securityfocus.com/bid/51702
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657445
reference_id 657445
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657445
9
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/72756
reference_id 72756
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url https://exchange.xforce.ibmcloud.com/vulnerabilities/72756
10
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=785292
reference_id 785292
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=785292
11
reference_url http://osvdb.org/78706
reference_id 78706
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://osvdb.org/78706
12
reference_url http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c
reference_id auth-options.c
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c
13
reference_url http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c.diff?r1=1.53%3Br2=1.54
reference_id auth-options.c.diff?r1=1.53%3Br2=1.54
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/auth-options.c.diff?r1=1.53%3Br2=1.54
14
reference_url http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657445
reference_id bugreport.cgi?bug=657445
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=657445
15
reference_url https://security.gentoo.org/glsa/201405-06
reference_id GLSA-201405-06
reference_type
scores
url https://security.gentoo.org/glsa/201405-06
16
reference_url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
reference_id index?page=content&id=JSA10673
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-22T10:26:37Z/
url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10673
fixed_packages
0
url pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
purl pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gpxr-fhh7-ubcm
14
vulnerability VCID-jfe9-9b2f-q7g6
15
vulnerability VCID-jpff-x78s-nkhw
16
vulnerability VCID-mwrp-bru4-fbb7
17
vulnerability VCID-pzgw-b5hx-jufb
18
vulnerability VCID-qdj6-v2mm-u3hv
19
vulnerability VCID-rp6w-z4mn-33d4
20
vulnerability VCID-sy27-quy6-fkgj
21
vulnerability VCID-t4xk-zzys-jqa1
22
vulnerability VCID-t9g4-188x-ekbc
23
vulnerability VCID-yf3u-639n-ake8
24
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.0p1-4%252Bdeb7u4
aliases CVE-2012-0814
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kdeq-2yyr-hkg9
21
url VCID-m67r-g1xt-d3e4
vulnerability_id VCID-m67r-g1xt-d3e4
summary Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbitrary code if GSSAPI authentication is enabled, via unspecified vectors that lead to a double-free.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5051.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5051.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-5051
reference_id
reference_type
scores
0
value 0.02554
scoring_system epss
scoring_elements 0.85775
published_at 2026-06-04T12:55:00Z
1
value 0.02554
scoring_system epss
scoring_elements 0.85798
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-5051
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5051
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5051
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=208347
reference_id 208347
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=208347
5
reference_url https://security.gentoo.org/glsa/200611-06
reference_id GLSA-200611-06
reference_type
scores
url https://security.gentoo.org/glsa/200611-06
6
reference_url https://access.redhat.com/errata/RHSA-2006:0697
reference_id RHSA-2006:0697
reference_type
scores
url https://access.redhat.com/errata/RHSA-2006:0697
7
reference_url https://access.redhat.com/errata/RHSA-2006:0698
reference_id RHSA-2006:0698
reference_type
scores
url https://access.redhat.com/errata/RHSA-2006:0698
8
reference_url https://usn.ubuntu.com/355-1/
reference_id USN-355-1
reference_type
scores
url https://usn.ubuntu.com/355-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:5.1p1-5
purl pkg:deb/debian/openssh@1:5.1p1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gp9q-a913-gyhq
14
vulnerability VCID-gpxr-fhh7-ubcm
15
vulnerability VCID-jfe9-9b2f-q7g6
16
vulnerability VCID-jpff-x78s-nkhw
17
vulnerability VCID-kdeq-2yyr-hkg9
18
vulnerability VCID-mwrp-bru4-fbb7
19
vulnerability VCID-pzgw-b5hx-jufb
20
vulnerability VCID-qdj6-v2mm-u3hv
21
vulnerability VCID-rp6w-z4mn-33d4
22
vulnerability VCID-sy27-quy6-fkgj
23
vulnerability VCID-t4xk-zzys-jqa1
24
vulnerability VCID-t9g4-188x-ekbc
25
vulnerability VCID-yf3u-639n-ake8
26
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:5.1p1-5
aliases CVE-2006-5051
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m67r-g1xt-d3e4
22
url VCID-mwrp-bru4-fbb7
vulnerability_id VCID-mwrp-bru4-fbb7
summary The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time window.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5352.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5352.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5352
reference_id
reference_type
scores
0
value 0.0539
scoring_system epss
scoring_elements 0.90284
published_at 2026-06-04T12:55:00Z
1
value 0.0539
scoring_system epss
scoring_elements 0.90299
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5352
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5352
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5352
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1238231
reference_id 1238231
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1238231
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=790798
reference_id 790798
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=790798
5
reference_url https://security.gentoo.org/glsa/201512-04
reference_id GLSA-201512-04
reference_type
scores
url https://security.gentoo.org/glsa/201512-04
6
reference_url https://access.redhat.com/errata/RHSA-2016:0741
reference_id RHSA-2016:0741
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0741
7
reference_url https://usn.ubuntu.com/2710-1/
reference_id USN-2710-1
reference_type
scores
url https://usn.ubuntu.com/2710-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2015-5352
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mwrp-bru4-fbb7
23
url VCID-ntmv-cqw4-y7d4
vulnerability_id VCID-ntmv-cqw4-y7d4
summary Unspecified vulnerability in portable OpenSSH before 4.4, when running on some platforms, allows remote attackers to determine the validity of usernames via unknown vectors involving a GSSAPI "authentication abort."
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5052.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-5052.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-5052
reference_id
reference_type
scores
0
value 0.14969
scoring_system epss
scoring_elements 0.94686
published_at 2026-06-04T12:55:00Z
1
value 0.14969
scoring_system epss
scoring_elements 0.94694
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-5052
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5052
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5052
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=234643
reference_id 234643
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=234643
4
reference_url https://security.gentoo.org/glsa/200611-06
reference_id GLSA-200611-06
reference_type
scores
url https://security.gentoo.org/glsa/200611-06
5
reference_url https://access.redhat.com/errata/RHSA-2007:0540
reference_id RHSA-2007:0540
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0540
6
reference_url https://access.redhat.com/errata/RHSA-2007:0703
reference_id RHSA-2007:0703
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0703
fixed_packages
0
url pkg:deb/debian/openssh@1:5.1p1-5
purl pkg:deb/debian/openssh@1:5.1p1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gp9q-a913-gyhq
14
vulnerability VCID-gpxr-fhh7-ubcm
15
vulnerability VCID-jfe9-9b2f-q7g6
16
vulnerability VCID-jpff-x78s-nkhw
17
vulnerability VCID-kdeq-2yyr-hkg9
18
vulnerability VCID-mwrp-bru4-fbb7
19
vulnerability VCID-pzgw-b5hx-jufb
20
vulnerability VCID-qdj6-v2mm-u3hv
21
vulnerability VCID-rp6w-z4mn-33d4
22
vulnerability VCID-sy27-quy6-fkgj
23
vulnerability VCID-t4xk-zzys-jqa1
24
vulnerability VCID-t9g4-188x-ekbc
25
vulnerability VCID-yf3u-639n-ake8
26
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:5.1p1-5
aliases CVE-2006-5052
risk_score 0.1
exploitability 0.5
weighted_severity 0.1
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ntmv-cqw4-y7d4
24
url VCID-p6kp-cqcx-e3bt
vulnerability_id VCID-p6kp-cqcx-e3bt
summary OpenSSH 4.4 up to versions before 4.9 allows remote authenticated users to bypass the sshd_config ForceCommand directive by modifying the .ssh/rc session file.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1657.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1657.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-1657
reference_id
reference_type
scores
0
value 0.00458
scoring_system epss
scoring_elements 0.64311
published_at 2026-06-04T12:55:00Z
1
value 0.00458
scoring_system epss
scoring_elements 0.64355
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-1657
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1657
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1657
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=440268
reference_id 440268
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=440268
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475156
reference_id 475156
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=475156
5
reference_url https://security.gentoo.org/glsa/200804-03
reference_id GLSA-200804-03
reference_type
scores
url https://security.gentoo.org/glsa/200804-03
6
reference_url https://usn.ubuntu.com/649-1/
reference_id USN-649-1
reference_type
scores
url https://usn.ubuntu.com/649-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:5.1p1-5
purl pkg:deb/debian/openssh@1:5.1p1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gp9q-a913-gyhq
14
vulnerability VCID-gpxr-fhh7-ubcm
15
vulnerability VCID-jfe9-9b2f-q7g6
16
vulnerability VCID-jpff-x78s-nkhw
17
vulnerability VCID-kdeq-2yyr-hkg9
18
vulnerability VCID-mwrp-bru4-fbb7
19
vulnerability VCID-pzgw-b5hx-jufb
20
vulnerability VCID-qdj6-v2mm-u3hv
21
vulnerability VCID-rp6w-z4mn-33d4
22
vulnerability VCID-sy27-quy6-fkgj
23
vulnerability VCID-t4xk-zzys-jqa1
24
vulnerability VCID-t9g4-188x-ekbc
25
vulnerability VCID-yf3u-639n-ake8
26
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:5.1p1-5
aliases CVE-2008-1657
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p6kp-cqcx-e3bt
25
url VCID-pzgw-b5hx-jufb
vulnerability_id VCID-pzgw-b5hx-jufb
summary The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2653.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2653.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-2653
reference_id
reference_type
scores
0
value 0.02148
scoring_system epss
scoring_elements 0.84574
published_at 2026-06-05T12:55:00Z
1
value 0.02148
scoring_system epss
scoring_elements 0.84549
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-2653
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2532
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2532
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2653
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2653
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1081338
reference_id 1081338
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1081338
5
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html
reference_id 133537.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html
6
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html
reference_id 134026.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html
7
reference_url http://secunia.com/advisories/59855
reference_id 59855
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://secunia.com/advisories/59855
8
reference_url http://www.securityfocus.com/bid/66459
reference_id 66459
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://www.securityfocus.com/bid/66459
9
reference_url http://openwall.com/lists/oss-security/2014/03/26/7
reference_id 7
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://openwall.com/lists/oss-security/2014/03/26/7
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513
reference_id 742513
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513
11
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2014:068
reference_id advisories?name=MDVSA-2014:068
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://www.mandriva.com/security/advisories?name=MDVSA-2014:068
12
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:095
reference_id advisories?name=MDVSA-2015:095
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:095
13
reference_url http://www.debian.org/security/2014/dsa-2894
reference_id dsa-2894
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://www.debian.org/security/2014/dsa-2894
14
reference_url http://marc.info/?l=bugtraq&m=141576985122836&w=2
reference_id ?l=bugtraq&m=141576985122836&w=2
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://marc.info/?l=bugtraq&m=141576985122836&w=2
15
reference_url http://advisories.mageia.org/MGASA-2014-0166.html
reference_id MGASA-2014-0166.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://advisories.mageia.org/MGASA-2014-0166.html
16
reference_url http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc
reference_id openssh_advisory4.asc
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc
17
reference_url https://access.redhat.com/errata/RHSA-2014:1552
reference_id RHSA-2014:1552
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1552
18
reference_url http://rhn.redhat.com/errata/RHSA-2014-1552.html
reference_id RHSA-2014-1552.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://rhn.redhat.com/errata/RHSA-2014-1552.html
19
reference_url https://access.redhat.com/errata/RHSA-2015:0425
reference_id RHSA-2015:0425
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0425
20
reference_url http://rhn.redhat.com/errata/RHSA-2015-0425.html
reference_id RHSA-2015-0425.html
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://rhn.redhat.com/errata/RHSA-2015-0425.html
21
reference_url https://usn.ubuntu.com/2164-1/
reference_id USN-2164-1
reference_type
scores
url https://usn.ubuntu.com/2164-1/
22
reference_url http://www.ubuntu.com/usn/USN-2164-1
reference_id USN-2164-1
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:42:46Z/
url http://www.ubuntu.com/usn/USN-2164-1
fixed_packages
0
url pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
purl pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gpxr-fhh7-ubcm
14
vulnerability VCID-jfe9-9b2f-q7g6
15
vulnerability VCID-jpff-x78s-nkhw
16
vulnerability VCID-mwrp-bru4-fbb7
17
vulnerability VCID-pzgw-b5hx-jufb
18
vulnerability VCID-qdj6-v2mm-u3hv
19
vulnerability VCID-rp6w-z4mn-33d4
20
vulnerability VCID-sy27-quy6-fkgj
21
vulnerability VCID-t4xk-zzys-jqa1
22
vulnerability VCID-t9g4-188x-ekbc
23
vulnerability VCID-yf3u-639n-ake8
24
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.0p1-4%252Bdeb7u4
1
url pkg:deb/debian/openssh@1:6.6p1-4~bpo70%2B1
purl pkg:deb/debian/openssh@1:6.6p1-4~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-fr4t-rqsq-pbfu
11
vulnerability VCID-fyug-5932-57az
12
vulnerability VCID-gpxr-fhh7-ubcm
13
vulnerability VCID-jfe9-9b2f-q7g6
14
vulnerability VCID-jpff-x78s-nkhw
15
vulnerability VCID-mwrp-bru4-fbb7
16
vulnerability VCID-qdj6-v2mm-u3hv
17
vulnerability VCID-rp6w-z4mn-33d4
18
vulnerability VCID-t4xk-zzys-jqa1
19
vulnerability VCID-t9g4-188x-ekbc
20
vulnerability VCID-yf3u-639n-ake8
21
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.6p1-4~bpo70%252B1
aliases CVE-2014-2653
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pzgw-b5hx-jufb
26
url VCID-qdj6-v2mm-u3hv
vulnerability_id VCID-qdj6-v2mm-u3hv
summary The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client's download directory by creating a crafted subdirectory anywhere on the remote server. The victim must use the command scp -rp to download a file hierarchy containing, anywhere inside, this crafted subdirectory. NOTE: the vendor points out that "this attack can achieve no more than a hostile peer is already able to achieve within the scp protocol" and "utimes does not fail under normal circumstances.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12062.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-12062.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-12062
reference_id
reference_type
scores
0
value 0.0096
scoring_system epss
scoring_elements 0.76824
published_at 2026-06-04T12:55:00Z
1
value 0.0096
scoring_system epss
scoring_elements 0.76857
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-12062
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12062
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-12062
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1854145
reference_id 1854145
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1854145
fixed_packages
0
url pkg:deb/debian/openssh@1:8.4p1-5%2Bdeb11u3
purl pkg:deb/debian/openssh@1:8.4p1-5%2Bdeb11u3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ku5v-32rk-5qbv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:8.4p1-5%252Bdeb11u3
aliases CVE-2020-12062
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qdj6-v2mm-u3hv
27
url VCID-rp6w-z4mn-33d4
vulnerability_id VCID-rp6w-z4mn-33d4
summary sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username does not exist, which allows remote attackers to enumerate users by leveraging the timing difference between responses when a large password is provided.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6210.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6210
reference_id
reference_type
scores
0
value 0.90046
scoring_system epss
scoring_elements 0.99602
published_at 2026-06-05T12:55:00Z
1
value 0.90046
scoring_system epss
scoring_elements 0.99601
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6210
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6210
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:N
1
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url http://www.securitytracker.com/id/1036319
reference_id 1036319
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url http://www.securitytracker.com/id/1036319
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1357442
reference_id 1357442
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1357442
6
reference_url https://www.exploit-db.com/exploits/40113/
reference_id 40113
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url https://www.exploit-db.com/exploits/40113/
7
reference_url https://www.exploit-db.com/exploits/40136/
reference_id 40136
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url https://www.exploit-db.com/exploits/40136/
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831902
reference_id 831902
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=831902
9
reference_url http://www.securityfocus.com/bid/91812
reference_id 91812
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url http://www.securityfocus.com/bid/91812
10
reference_url http://seclists.org/fulldisclosure/2016/Jul/51
reference_id CVE-2016-6210
reference_type exploit
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url http://seclists.org/fulldisclosure/2016/Jul/51
11
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40113.txt
reference_id CVE-2016-6210
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40113.txt
12
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40136.py
reference_id CVE-2016-6210
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/40136.py
13
reference_url http://www.debian.org/security/2016/dsa-3626
reference_id dsa-3626
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url http://www.debian.org/security/2016/dsa-3626
14
reference_url https://security.gentoo.org/glsa/201612-18
reference_id GLSA-201612-18
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url https://security.gentoo.org/glsa/201612-18
15
reference_url https://security.netapp.com/advisory/ntap-20190206-0001/
reference_id ntap-20190206-0001
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url https://security.netapp.com/advisory/ntap-20190206-0001/
16
reference_url https://www.openssh.com/txt/release-7.3
reference_id release-7.3
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url https://www.openssh.com/txt/release-7.3
17
reference_url https://access.redhat.com/errata/RHSA-2017:2029
reference_id RHSA-2017:2029
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url https://access.redhat.com/errata/RHSA-2017:2029
18
reference_url https://access.redhat.com/errata/RHSA-2017:2563
reference_id RHSA-2017:2563
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url https://access.redhat.com/errata/RHSA-2017:2563
19
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 5.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-29T20:17:34Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
20
reference_url https://usn.ubuntu.com/3061-1/
reference_id USN-3061-1
reference_type
scores
url https://usn.ubuntu.com/3061-1/
fixed_packages
0
url pkg:deb/debian/openssh@1:6.7p1-5%2Bdeb8u4
purl pkg:deb/debian/openssh@1:6.7p1-5%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-fyug-5932-57az
11
vulnerability VCID-gpxr-fhh7-ubcm
12
vulnerability VCID-jfe9-9b2f-q7g6
13
vulnerability VCID-jpff-x78s-nkhw
14
vulnerability VCID-mwrp-bru4-fbb7
15
vulnerability VCID-qdj6-v2mm-u3hv
16
vulnerability VCID-rp6w-z4mn-33d4
17
vulnerability VCID-t4xk-zzys-jqa1
18
vulnerability VCID-t9g4-188x-ekbc
19
vulnerability VCID-yf3u-639n-ake8
20
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.7p1-5%252Bdeb8u4
1
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-6210
risk_score 9.6
exploitability 2.0
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rp6w-z4mn-33d4
28
url VCID-sy27-quy6-fkgj
vulnerability_id VCID-sy27-quy6-fkgj
summary sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment restrictions by using a substring located before a wildcard character.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2532.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-2532.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-2532
reference_id
reference_type
scores
0
value 0.00104
scoring_system epss
scoring_elements 0.27983
published_at 2026-06-04T12:55:00Z
1
value 0.00104
scoring_system epss
scoring_elements 0.28053
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-2532
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2532
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2532
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2653
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2653
4
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
5
reference_url http://www.securitytracker.com/id/1029925
reference_id 1029925
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://www.securitytracker.com/id/1029925
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1077843
reference_id 1077843
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1077843
7
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html
reference_id 133537.html
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html
8
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html
reference_id 134026.html
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html
9
reference_url http://secunia.com/advisories/57488
reference_id 57488
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://secunia.com/advisories/57488
10
reference_url http://secunia.com/advisories/57574
reference_id 57574
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://secunia.com/advisories/57574
11
reference_url http://secunia.com/advisories/59313
reference_id 59313
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://secunia.com/advisories/59313
12
reference_url http://secunia.com/advisories/59855
reference_id 59855
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://secunia.com/advisories/59855
13
reference_url http://www.securityfocus.com/bid/66355
reference_id 66355
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://www.securityfocus.com/bid/66355
14
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/91986
reference_id 91986
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url https://exchange.xforce.ibmcloud.com/vulnerabilities/91986
15
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2014:068
reference_id advisories?name=MDVSA-2014:068
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://www.mandriva.com/security/advisories?name=MDVSA-2014:068
16
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:095
reference_id advisories?name=MDVSA-2015:095
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:095
17
reference_url http://www.debian.org/security/2014/dsa-2894
reference_id dsa-2894
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://www.debian.org/security/2014/dsa-2894
18
reference_url https://security.gentoo.org/glsa/201405-06
reference_id GLSA-201405-06
reference_type
scores
url https://security.gentoo.org/glsa/201405-06
19
reference_url https://support.apple.com/HT205267
reference_id HT205267
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url https://support.apple.com/HT205267
20
reference_url http://marc.info/?l=bugtraq&m=141576985122836&w=2
reference_id ?l=bugtraq&m=141576985122836&w=2
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://marc.info/?l=bugtraq&m=141576985122836&w=2
21
reference_url http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2
reference_id ?l=openbsd-security-announce&m=139492048027313&w=2
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://marc.info/?l=openbsd-security-announce&m=139492048027313&w=2
22
reference_url http://advisories.mageia.org/MGASA-2014-0143.html
reference_id MGASA-2014-0143.html
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://advisories.mageia.org/MGASA-2014-0143.html
23
reference_url http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
reference_id msg00008.html
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html
24
reference_url http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc
reference_id openssh_advisory4.asc
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc
25
reference_url https://access.redhat.com/errata/RHSA-2014:1552
reference_id RHSA-2014:1552
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1552
26
reference_url http://rhn.redhat.com/errata/RHSA-2014-1552.html
reference_id RHSA-2014-1552.html
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://rhn.redhat.com/errata/RHSA-2014-1552.html
27
reference_url https://usn.ubuntu.com/2155-1/
reference_id USN-2155-1
reference_type
scores
url https://usn.ubuntu.com/2155-1/
28
reference_url http://www.ubuntu.com/usn/USN-2155-1
reference_id USN-2155-1
reference_type
scores
0
value 4.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T17:40:36Z/
url http://www.ubuntu.com/usn/USN-2155-1
fixed_packages
0
url pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
purl pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gpxr-fhh7-ubcm
14
vulnerability VCID-jfe9-9b2f-q7g6
15
vulnerability VCID-jpff-x78s-nkhw
16
vulnerability VCID-mwrp-bru4-fbb7
17
vulnerability VCID-pzgw-b5hx-jufb
18
vulnerability VCID-qdj6-v2mm-u3hv
19
vulnerability VCID-rp6w-z4mn-33d4
20
vulnerability VCID-sy27-quy6-fkgj
21
vulnerability VCID-t4xk-zzys-jqa1
22
vulnerability VCID-t9g4-188x-ekbc
23
vulnerability VCID-yf3u-639n-ake8
24
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.0p1-4%252Bdeb7u4
1
url pkg:deb/debian/openssh@1:6.6p1-4~bpo70%2B1
purl pkg:deb/debian/openssh@1:6.6p1-4~bpo70%2B1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-fr4t-rqsq-pbfu
11
vulnerability VCID-fyug-5932-57az
12
vulnerability VCID-gpxr-fhh7-ubcm
13
vulnerability VCID-jfe9-9b2f-q7g6
14
vulnerability VCID-jpff-x78s-nkhw
15
vulnerability VCID-mwrp-bru4-fbb7
16
vulnerability VCID-qdj6-v2mm-u3hv
17
vulnerability VCID-rp6w-z4mn-33d4
18
vulnerability VCID-t4xk-zzys-jqa1
19
vulnerability VCID-t9g4-188x-ekbc
20
vulnerability VCID-yf3u-639n-ake8
21
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.6p1-4~bpo70%252B1
aliases CVE-2014-2532
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sy27-quy6-fkgj
29
url VCID-t4xk-zzys-jqa1
vulnerability_id VCID-t4xk-zzys-jqa1
summary The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0778.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-0778.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-0778
reference_id
reference_type
scores
0
value 0.00787
scoring_system epss
scoring_elements 0.74228
published_at 2026-06-05T12:55:00Z
1
value 0.00787
scoring_system epss
scoring_elements 0.74195
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-0778
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0777
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0778
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0778
4
reference_url http://www.securitytracker.com/id/1034671
reference_id 1034671
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://www.securitytracker.com/id/1034671
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1298033
reference_id 1298033
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1298033
6
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html
reference_id 176349.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-January/176349.html
7
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html
reference_id 176516.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2016-February/176516.html
8
reference_url http://seclists.org/fulldisclosure/2016/Jan/44
reference_id 44
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://seclists.org/fulldisclosure/2016/Jan/44
9
reference_url http://www.openwall.com/lists/oss-security/2016/01/14/7
reference_id 7
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://www.openwall.com/lists/oss-security/2016/01/14/7
10
reference_url http://www.securityfocus.com/bid/80698
reference_id 80698
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://www.securityfocus.com/bid/80698
11
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375
reference_id docDisplay?docId=emr_na-c05247375
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05247375
12
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
reference_id docDisplay?docId=emr_na-c05356388
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05356388
13
reference_url http://www.debian.org/security/2016/dsa-3446
reference_id dsa-3446
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://www.debian.org/security/2016/dsa-3446
14
reference_url https://security.gentoo.org/glsa/201601-01
reference_id GLSA-201601-01
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url https://security.gentoo.org/glsa/201601-01
15
reference_url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734
reference_id index?page=content&id=JSA10734
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10734
16
reference_url http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
reference_id linuxbulletinjan2016-2867209.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
17
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html
reference_id msg00006.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00006.html
18
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html
reference_id msg00007.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00007.html
19
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html
reference_id msg00008.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00008.html
20
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html
reference_id msg00009.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00009.html
21
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html
reference_id msg00013.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00013.html
22
reference_url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html
reference_id msg00014.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00014.html
23
reference_url http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html
reference_id Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://packetstormsecurity.com/files/135273/Qualys-Security-Advisory-OpenSSH-Overflow-Leak.html
24
reference_url http://www.openssh.com/txt/release-7.1p2
reference_id release-7.1p2
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://www.openssh.com/txt/release-7.1p2
25
reference_url https://access.redhat.com/errata/RHSA-2016:0043
reference_id RHSA-2016:0043
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0043
26
reference_url https://bto.bluecoat.com/security-advisory/sa109
reference_id sa109
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url https://bto.bluecoat.com/security-advisory/sa109
27
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
28
reference_url http://www.securityfocus.com/archive/1/537295/100/0/threaded
reference_id threaded
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://www.securityfocus.com/archive/1/537295/100/0/threaded
29
reference_url https://usn.ubuntu.com/2869-1/
reference_id USN-2869-1
reference_type
scores
url https://usn.ubuntu.com/2869-1/
30
reference_url http://www.ubuntu.com/usn/USN-2869-1
reference_id USN-2869-1
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url http://www.ubuntu.com/usn/USN-2869-1
31
reference_url https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/
reference_id utm-up2date-9-319-released
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url https://blogs.sophos.com/2016/02/29/utm-up2date-9-319-released/
32
reference_url https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/
reference_id utm-up2date-9-354-released
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-29T20:28:06Z/
url https://blogs.sophos.com/2016/02/17/utm-up2date-9-354-released/
fixed_packages
0
url pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
purl pkg:deb/debian/openssh@1:6.0p1-4%2Bdeb7u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gpxr-fhh7-ubcm
14
vulnerability VCID-jfe9-9b2f-q7g6
15
vulnerability VCID-jpff-x78s-nkhw
16
vulnerability VCID-mwrp-bru4-fbb7
17
vulnerability VCID-pzgw-b5hx-jufb
18
vulnerability VCID-qdj6-v2mm-u3hv
19
vulnerability VCID-rp6w-z4mn-33d4
20
vulnerability VCID-sy27-quy6-fkgj
21
vulnerability VCID-t4xk-zzys-jqa1
22
vulnerability VCID-t9g4-188x-ekbc
23
vulnerability VCID-yf3u-639n-ake8
24
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.0p1-4%252Bdeb7u4
1
url pkg:deb/debian/openssh@1:6.7p1-5%2Bdeb8u4
purl pkg:deb/debian/openssh@1:6.7p1-5%2Bdeb8u4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-fyug-5932-57az
11
vulnerability VCID-gpxr-fhh7-ubcm
12
vulnerability VCID-jfe9-9b2f-q7g6
13
vulnerability VCID-jpff-x78s-nkhw
14
vulnerability VCID-mwrp-bru4-fbb7
15
vulnerability VCID-qdj6-v2mm-u3hv
16
vulnerability VCID-rp6w-z4mn-33d4
17
vulnerability VCID-t4xk-zzys-jqa1
18
vulnerability VCID-t9g4-188x-ekbc
19
vulnerability VCID-yf3u-639n-ake8
20
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:6.7p1-5%252Bdeb8u4
2
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-0778
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t4xk-zzys-jqa1
30
url VCID-t9g4-188x-ekbc
vulnerability_id VCID-t9g4-188x-ekbc
summary The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6563.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-6563.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-6563
reference_id
reference_type
scores
0
value 0.00102
scoring_system epss
scoring_elements 0.27644
published_at 2026-06-04T12:55:00Z
1
value 0.00102
scoring_system epss
scoring_elements 0.2771
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-6563
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6563
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6563
3
reference_url http://www.openwall.com/lists/oss-security/2015/08/22/1
reference_id 1
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url http://www.openwall.com/lists/oss-security/2015/08/22/1
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1252844
reference_id 1252844
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1252844
5
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html
reference_id 165170.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url http://lists.fedoraproject.org/pipermail/package-announce/2015-August/165170.html
6
reference_url http://seclists.org/fulldisclosure/2015/Aug/54
reference_id 54
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url http://seclists.org/fulldisclosure/2015/Aug/54
7
reference_url http://www.securityfocus.com/bid/76317
reference_id 76317
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url http://www.securityfocus.com/bid/76317
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795711
reference_id 795711
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795711
9
reference_url https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-766
reference_id brocade-security-advisory-2019-766
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url https://www.broadcom.com/support/fibre-channel-networking/security-advisories/brocade-security-advisory-2019-766
10
reference_url https://github.com/openssh/openssh-portable/commit/d4697fe9a28dab7255c60433e4dd23cf7fce8a8b
reference_id d4697fe9a28dab7255c60433e4dd23cf7fce8a8b
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url https://github.com/openssh/openssh-portable/commit/d4697fe9a28dab7255c60433e4dd23cf7fce8a8b
11
reference_url https://security.gentoo.org/glsa/201512-04
reference_id GLSA-201512-04
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url https://security.gentoo.org/glsa/201512-04
12
reference_url https://support.apple.com/HT205375
reference_id HT205375
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url https://support.apple.com/HT205375
13
reference_url http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
reference_id msg00005.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url http://lists.apple.com/archives/security-announce/2015/Oct/msg00005.html
14
reference_url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
reference_id msg00010.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url https://lists.debian.org/debian-lts-announce/2018/09/msg00010.html
15
reference_url http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html
reference_id msg00017.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00017.html
16
reference_url https://security.netapp.com/advisory/ntap-20180201-0002/
reference_id ntap-20180201-0002
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url https://security.netapp.com/advisory/ntap-20180201-0002/
17
reference_url http://www.openssh.com/txt/release-7.0
reference_id release-7.0
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url http://www.openssh.com/txt/release-7.0
18
reference_url https://access.redhat.com/errata/RHSA-2015:2088
reference_id RHSA-2015:2088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2088
19
reference_url https://access.redhat.com/errata/RHSA-2016:0741
reference_id RHSA-2016:0741
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0741
20
reference_url http://rhn.redhat.com/errata/RHSA-2016-0741.html
reference_id RHSA-2016-0741.html
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url http://rhn.redhat.com/errata/RHSA-2016-0741.html
21
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-27T16:11:48Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2015-6563
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-t9g4-188x-ekbc
31
url VCID-xveu-shk1-b3fa
vulnerability_id VCID-xveu-shk1-b3fa
summary The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-2285
reference_id
reference_type
scores
0
value 0.00356
scoring_system epss
scoring_elements 0.58144
published_at 2026-06-04T12:55:00Z
1
value 0.00356
scoring_system epss
scoring_elements 0.58194
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-2285
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2285
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2285
2
reference_url https://usn.ubuntu.com/612-5/
reference_id USN-612-5
reference_type
scores
url https://usn.ubuntu.com/612-5/
fixed_packages
0
url pkg:deb/debian/openssh@1:5.1p1-5
purl pkg:deb/debian/openssh@1:5.1p1-5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19z4-v53b-uua4
1
vulnerability VCID-1g1a-dx81-fugd
2
vulnerability VCID-2259-7fuv-2fdj
3
vulnerability VCID-2ux1-mzk1-hbht
4
vulnerability VCID-2wag-yq6a-2kg8
5
vulnerability VCID-55nm-g9f8-qfeh
6
vulnerability VCID-7e68-w3cr-z3c4
7
vulnerability VCID-bakg-yahy-qybz
8
vulnerability VCID-d8zj-qfhp-tycr
9
vulnerability VCID-dk46-7un2-z3bw
10
vulnerability VCID-eeca-d7xg-dqfj
11
vulnerability VCID-fr4t-rqsq-pbfu
12
vulnerability VCID-fyug-5932-57az
13
vulnerability VCID-gp9q-a913-gyhq
14
vulnerability VCID-gpxr-fhh7-ubcm
15
vulnerability VCID-jfe9-9b2f-q7g6
16
vulnerability VCID-jpff-x78s-nkhw
17
vulnerability VCID-kdeq-2yyr-hkg9
18
vulnerability VCID-mwrp-bru4-fbb7
19
vulnerability VCID-pzgw-b5hx-jufb
20
vulnerability VCID-qdj6-v2mm-u3hv
21
vulnerability VCID-rp6w-z4mn-33d4
22
vulnerability VCID-sy27-quy6-fkgj
23
vulnerability VCID-t4xk-zzys-jqa1
24
vulnerability VCID-t9g4-188x-ekbc
25
vulnerability VCID-yf3u-639n-ake8
26
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:5.1p1-5
aliases CVE-2008-2285
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xveu-shk1-b3fa
32
url VCID-yf3u-639n-ake8
vulnerability_id VCID-yf3u-639n-ake8
summary The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) by sending many duplicate KEXINIT requests. NOTE: a third party reports that "OpenSSH upstream does not consider this as a security issue."
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8858.json
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8858.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8858
reference_id
reference_type
scores
0
value 0.31178
scoring_system epss
scoring_elements 0.96858
published_at 2026-06-05T12:55:00Z
1
value 0.31178
scoring_system epss
scoring_elements 0.96853
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8858
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8858
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8858
3
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
4
reference_url https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/013_ssh_kexinit.patch.sig
reference_id 013_ssh_kexinit.patch.sig
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url https://ftp.openbsd.org/pub/OpenBSD/patches/6.0/common/013_ssh_kexinit.patch.sig
5
reference_url http://www.openwall.com/lists/oss-security/2016/10/20/1
reference_id 1
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url http://www.openwall.com/lists/oss-security/2016/10/20/1
6
reference_url http://www.securitytracker.com/id/1037057
reference_id 1037057
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url http://www.securitytracker.com/id/1037057
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1384860
reference_id 1384860
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url https://bugzilla.redhat.com/show_bug.cgi?id=1384860
8
reference_url http://www.openwall.com/lists/oss-security/2016/10/19/3
reference_id 3
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url http://www.openwall.com/lists/oss-security/2016/10/19/3
9
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841884
reference_id 841884
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=841884
10
reference_url http://www.securityfocus.com/bid/93776
reference_id 93776
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url http://www.securityfocus.com/bid/93776
11
reference_url https://github.com/openssh/openssh-portable/commit/ec165c392ca54317dbe3064a8c200de6531e89ad
reference_id ec165c392ca54317dbe3064a8c200de6531e89ad
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url https://github.com/openssh/openssh-portable/commit/ec165c392ca54317dbe3064a8c200de6531e89ad
12
reference_url https://security.FreeBSD.org/advisories/FreeBSD-SA-16:33.openssh.asc
reference_id FreeBSD-SA-16:33.openssh.asc
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url https://security.FreeBSD.org/advisories/FreeBSD-SA-16:33.openssh.asc
13
reference_url https://security.gentoo.org/glsa/201612-18
reference_id GLSA-201612-18
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url https://security.gentoo.org/glsa/201612-18
14
reference_url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c.diff?r1=1.126&r2=1.127&f=h
reference_id kex.c.diff?r1=1.126&r2=1.127&f=h
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c.diff?r1=1.126&r2=1.127&f=h
15
reference_url https://security.netapp.com/advisory/ntap-20180201-0001/
reference_id ntap-20180201-0001
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url https://security.netapp.com/advisory/ntap-20180201-0001/
16
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
17
reference_url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup
reference_id x-cvsweb-markup
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-04-15T16:36:39Z/
url http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/kex.c?rev=1.127&content-type=text/x-cvsweb-markup
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
aliases CVE-2016-8858
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yf3u-639n-ake8
33
url VCID-yn56-bpaq-xfaj
vulnerability_id VCID-yn56-bpaq-xfaj
summary multiple issues
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json
reference_id
reference_type
scores
0
value 3.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-6109.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-6109
reference_id
reference_type
scores
0
value 0.09738
scoring_system epss
scoring_elements 0.93087
published_at 2026-06-04T12:55:00Z
1
value 0.09738
scoring_system epss
scoring_elements 0.93098
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-6109
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-20685
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6109
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6109
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6111
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1666119
reference_id 1666119
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1666119
7
reference_url https://usn.ubuntu.com/3885-1/
reference_id 3885-1
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://usn.ubuntu.com/3885-1/
8
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793412
reference_id 793412
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793412
9
reference_url https://security.archlinux.org/ASA-201904-11
reference_id ASA-201904-11
reference_type
scores
url https://security.archlinux.org/ASA-201904-11
10
reference_url https://security.archlinux.org/AVG-951
reference_id AVG-951
reference_type
scores
0
value High
scoring_system archlinux
scoring_elements
url https://security.archlinux.org/AVG-951
11
reference_url https://www.debian.org/security/2019/dsa-4387
reference_id dsa-4387
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://www.debian.org/security/2019/dsa-4387
12
reference_url https://security.gentoo.org/glsa/201903-16
reference_id GLSA-201903-16
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://security.gentoo.org/glsa/201903-16
13
reference_url https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html
reference_id msg00030.html
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://lists.debian.org/debian-lts-announce/2019/03/msg00030.html
14
reference_url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html
reference_id msg00058.html
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00058.html
15
reference_url https://security.netapp.com/advisory/ntap-20190213-0001/
reference_id ntap-20190213-0001
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://security.netapp.com/advisory/ntap-20190213-0001/
16
reference_url https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c
reference_id progressmeter.c
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://cvsweb.openbsd.org/src/usr.bin/ssh/progressmeter.c
17
reference_url https://access.redhat.com/errata/RHSA-2019:3702
reference_id RHSA-2019:3702
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://access.redhat.com/errata/RHSA-2019:3702
18
reference_url https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
reference_id scp.c
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://cvsweb.openbsd.org/src/usr.bin/ssh/scp.c
19
reference_url https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
reference_id scp-client-multiple-vulnerabilities.txt
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://sintonen.fi/advisories/scp-client-multiple-vulnerabilities.txt
20
reference_url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
reference_id ssa-412672.pdf
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://cert-portal.siemens.com/productcert/pdf/ssa-412672.pdf
21
reference_url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G/
reference_id W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2026-05-28T18:13:52Z/
url https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3YVQ2BPTOVDCFDVNC2GGF5P5ISFG37G/
fixed_packages
0
url pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
purl pkg:deb/debian/openssh@1:7.4p1-10%2Bdeb9u7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7e68-w3cr-z3c4
1
vulnerability VCID-d8zj-qfhp-tycr
2
vulnerability VCID-jfe9-9b2f-q7g6
3
vulnerability VCID-qdj6-v2mm-u3hv
4
vulnerability VCID-yn56-bpaq-xfaj
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.4p1-10%252Bdeb9u7
1
url pkg:deb/debian/openssh@1:7.9p1-10%2Bdeb10u2
purl pkg:deb/debian/openssh@1:7.9p1-10%2Bdeb10u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-qdj6-v2mm-u3hv
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:7.9p1-10%252Bdeb10u2
aliases CVE-2019-6109
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yn56-bpaq-xfaj
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/openssh@1:4.3p2-9etch3