Search for packages
| purl | pkg:deb/debian/openssh@1:4.3p2-9etch3 |
| Next non-vulnerable version | 1:9.2p1-2+deb12u7 |
| Latest non-vulnerable version | 1:9.2p1-2+deb12u7 |
| Risk | 10.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-124c-8gmd-xfb7
Aliases: CVE-2026-35414 |
Affected by 0 other vulnerabilities. |
|
|
VCID-1k3j-b43t-ckgx
Aliases: CVE-2023-38408 |
Affected by 11 other vulnerabilities. |
|
|
VCID-1m2m-365u-xbak
Aliases: CVE-2007-4752 |
A flaw has been discovered in OpenSSH which could allow a local attacker to bypass security restrictions. |
Affected by 48 other vulnerabilities. |
|
VCID-29b1-zcfn-1be6
Aliases: CVE-2020-12062 |
The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client's download directory by creating a crafted subdirectory anywhere on the remote server. The victim must use the command scp -rp to download a file hierarchy containing, anywhere inside, this crafted subdirectory. NOTE: the vendor points out that "this attack can achieve no more than a hostile peer is already able to achieve within the scp protocol" and "utimes does not fail under normal circumstances. |
Affected by 11 other vulnerabilities. |
|
VCID-358j-tvz2-dbau
Aliases: CVE-2025-61984 |
Affected by 0 other vulnerabilities. |
|
|
VCID-3ky7-2mqj-q7gh
Aliases: CVE-2026-35386 |
Affected by 0 other vulnerabilities. |
|
|
VCID-3rbw-3649-xkgw
Aliases: CVE-2016-1908 |
Affected by 23 other vulnerabilities. |
|
|
VCID-45uw-kmw8-qfg7
Aliases: CVE-2006-4925 |
packet.c in ssh in OpenSSH allows remote attackers to cause a denial of service (crash) by sending an invalid protocol sequence with USERAUTH_SUCCESS before NEWKEYS, which causes newkeys[mode] to be NULL. |
Affected by 48 other vulnerabilities. |
|
VCID-4hzf-4339-13b8
Aliases: CVE-2008-5161 |
Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors. |
Affected by 48 other vulnerabilities. |
|
VCID-51qb-g51q-b3fd
Aliases: CVE-2026-35388 |
Affected by 0 other vulnerabilities. |
|
|
VCID-59xb-y4z9-pbfp
Aliases: CVE-2018-20685 |
Affected by 23 other vulnerabilities. Affected by 17 other vulnerabilities. |
|
|
VCID-67qq-6dzp-d7ck
Aliases: CVE-2014-2653 |
security update |
Affected by 44 other vulnerabilities. Affected by 41 other vulnerabilities. |
|
VCID-6c6q-52re-zqdc
Aliases: CVE-2015-6563 |
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c. |
Affected by 23 other vulnerabilities. |
|
VCID-6ft3-n7d1-53h3
Aliases: CVE-2023-48795 GHSA-45x7-px36-x8w8 |
Affected by 11 other vulnerabilities. |
|
|
VCID-8mhg-d4md-sbd7
Aliases: CVE-2016-8858 |
Affected by 23 other vulnerabilities. |
|
|
VCID-8xuk-wu5f-6ygy
Aliases: CVE-2012-0814 |
The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, which allows remote authenticated users to obtain potentially sensitive information by reading these messages, as demonstrated by the shared user account required by Gitolite. NOTE: this can cross privilege boundaries because a user account may intentionally have no shell or filesystem access, and therefore may have no supported way to read an authorized_keys file in its own home directory. |
Affected by 44 other vulnerabilities. |
|
VCID-98ft-mftn-mfcu
Aliases: CVE-2025-26465 |
Affected by 0 other vulnerabilities. |
|
|
VCID-9ycf-2n8g-tyg6
Aliases: CVE-2015-5600 |
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumption) via a long and duplicative list in the ssh -oKbdInteractiveDevices option, as demonstrated by a modified client that provides a different password for each pam element on this list. |
Affected by 23 other vulnerabilities. |
|
VCID-amga-n7sa-zket
Aliases: CVE-2015-5352 |
Multiple vulnerabilities have been found in OpenSSH, the worst of which could lead to arbitrary code execution, or cause a Denial of Service condition. |
Affected by 23 other vulnerabilities. |
|
VCID-aws5-8ugp-f3cb
Aliases: CVE-2014-2532 |
Affected by 44 other vulnerabilities. Affected by 41 other vulnerabilities. |
|
|
VCID-ax8m-c1kt-6yb4
Aliases: CVE-2008-4109 |
A certain Debian patch for OpenSSH before 4.3p2-9etch3 on etch; before 4.6p1-1 on sid and lenny; and on other distributions such as SUSE uses functions that are not async-signal-safe in the signal handler for login timeouts, which allows remote attackers to cause a denial of service (connection slot exhaustion) via multiple login attempts. NOTE: this issue exists because of an incorrect fix for CVE-2006-5051. |
Affected by 48 other vulnerabilities. |
|
VCID-b8pn-bg8e-vyca
Aliases: CVE-2016-6515 |
Affected by 23 other vulnerabilities. |
|
|
VCID-bnpz-2y49-33cy
Aliases: CVE-2016-10010 |
Affected by 23 other vulnerabilities. |
|
|
VCID-c2p7-27z7-5ffc
Aliases: CVE-2026-35387 |
Affected by 0 other vulnerabilities. |
|
|
VCID-cm2c-arkw-audk
Aliases: CVE-2021-41617 |
Affected by 11 other vulnerabilities. |
|
|
VCID-d3f4-y8af-cbap
Aliases: CVE-2017-15906 |
Affected by 17 other vulnerabilities. |
|
|
VCID-dk18-vmt4-6yar
Aliases: CVE-2015-8325 |
Affected by 44 other vulnerabilities. Affected by 41 other vulnerabilities. Affected by 23 other vulnerabilities. |
|
|
VCID-dpkx-2htu-4yan
Aliases: CVE-2008-2285 |
The ssh-vulnkey tool on Ubuntu Linux 7.04, 7.10, and 8.04 LTS does not recognize authorized_keys lines that contain options, which makes it easier for remote attackers to exploit CVE-2008-0166 by guessing a key that was not identified by this tool. |
Affected by 48 other vulnerabilities. |
|
VCID-dscc-v22m-uyab
Aliases: CVE-2016-10011 |
Affected by 23 other vulnerabilities. |
|
|
VCID-e2cy-pzgk-9ucu
Aliases: CVE-2018-15473 |
Affected by 23 other vulnerabilities. Affected by 17 other vulnerabilities. |
|
|
VCID-eens-u1sp-17em
Aliases: CVE-2016-10708 |
Affected by 23 other vulnerabilities. |
|
|
VCID-ga81-2agq-dfca
Aliases: CVE-2016-10012 |
Affected by 23 other vulnerabilities. |
|
|
VCID-gmg1-md81-3ka6
Aliases: CVE-2019-6111 |
Affected by 23 other vulnerabilities. Affected by 17 other vulnerabilities. |
|
|
VCID-gvwt-pjzt-dbdw
Aliases: CVE-2016-0778 |
The (1) roaming_read and (2) roaming_write functions in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2, when certain proxy and forward options are enabled, do not properly maintain connection file descriptors, which allows remote servers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact by requesting many forwardings. |
Affected by 44 other vulnerabilities. Affected by 41 other vulnerabilities. Affected by 23 other vulnerabilities. |
|
VCID-hds4-e8hn-rkhy
Aliases: CVE-2016-1907 |
The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic. |
Affected by 23 other vulnerabilities. |
|
VCID-hfvj-pb4z-67av
Aliases: CVE-2026-3497 |
Affected by 0 other vulnerabilities. |
|
|
VCID-jbpg-y96n-kkdk
Aliases: CVE-2006-5052 |
Several Denial of Service vulnerabilities have been identified in OpenSSH. |
Affected by 48 other vulnerabilities. |
|
VCID-kcgk-nx2a-cqc4
Aliases: CVE-2016-0777 |
The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensitive information from process memory by requesting transmission of an entire buffer, as demonstrated by reading a private key. |
Affected by 44 other vulnerabilities. Affected by 41 other vulnerabilities. Affected by 23 other vulnerabilities. |
|
VCID-kmam-wvya-qkfx
Aliases: CVE-2011-0539 |
The key_certify function in usr.bin/ssh/key.c in OpenSSH 5.6 and 5.7, when generating legacy certificates using the -t command-line option in ssh-keygen, does not initialize the nonce field, which might allow remote attackers to obtain sensitive stack memory contents or make it easier to conduct hash collision attacks. |
Affected by 44 other vulnerabilities. |
|
VCID-mbbh-g3se-2yen
Aliases: CVE-2026-35385 |
Affected by 0 other vulnerabilities. |
|
|
VCID-nm47-brfe-rbfu
Aliases: CVE-2019-16905 |
An integer overflow in OpenSSH might allow an attacker to execute arbitrary code. |
Affected by 11 other vulnerabilities. |
|
VCID-payd-r87h-53cc
Aliases: CVE-2021-28041 |
Affected by 11 other vulnerabilities. |
|
|
VCID-pxgq-mjwq-bfa7
Aliases: DSA-4539-2 openssh |
regression update |
Affected by 17 other vulnerabilities. |
|
VCID-qbay-mr57-47bw
Aliases: CVE-2006-5051 |
Affected by 48 other vulnerabilities. |
|
|
VCID-rp48-23m3-h3bx
Aliases: CVE-2025-32728 |
Affected by 0 other vulnerabilities. |
|
|
VCID-tq7z-791w-pfgc
Aliases: CVE-2016-3115 |
Affected by 23 other vulnerabilities. |
|
|
VCID-ub91-638t-zkg1
Aliases: CVE-2010-5107 |
The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. |
Affected by 44 other vulnerabilities. |
|
VCID-v43n-cq86-8ug7
Aliases: CVE-2008-1483 |
Affected by 48 other vulnerabilities. |
|
|
VCID-vb6z-841p-53bn
Aliases: CVE-2016-10009 |
Affected by 23 other vulnerabilities. |
|
|
VCID-vcqw-c3yq-byhs
Aliases: CVE-2015-6564 |
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request. |
Affected by 23 other vulnerabilities. |
|
VCID-vfn3-y9yg-3yc7
Aliases: CVE-2016-6210 |
Affected by 41 other vulnerabilities. Affected by 23 other vulnerabilities. |
|
|
VCID-w28c-pys1-xqcy
Aliases: CVE-2008-1657 |
Two flaws have been discovered in OpenSSH which could allow local attackers to escalate their privileges. |
Affected by 48 other vulnerabilities. |
|
VCID-w614-bucg-hqby
Aliases: CVE-2011-5000 |
Multiple vulnerabilities have been found in OpenSSH, the worst of which may allow remote attackers to execute arbitrary code. |
Affected by 44 other vulnerabilities. |
|
VCID-xsrv-ne3r-37ej
Aliases: CVE-2023-51385 |
Affected by 11 other vulnerabilities. |
|
|
VCID-yujg-r2qc-n7br
Aliases: CVE-2013-4548 |
The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet data that provides a crafted callback address. |
Affected by 41 other vulnerabilities. |
|
VCID-z7bz-947q-jkgt
Aliases: CVE-2025-61985 |
Affected by 0 other vulnerabilities. |
|
|
VCID-z8hs-nkmn-dfcs
Aliases: CVE-2019-6109 |
Affected by 23 other vulnerabilities. Affected by 17 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||