Search for packages
| purl | pkg:ebuild/net-misc/openssh@8.0_p1-r2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-aa65-q5ek-aaaj
Aliases: CVE-2019-16905 |
OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key. This leads to memory corruption and local code execution because of an error in the XMSS key parsing algorithm. NOTE: the XMSS implementation is considered experimental in all released OpenSSH versions, and there is no supported way to enable it when building portable OpenSSH. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-03-28T13:05:03.371054+00:00 | Gentoo Importer | Affected by | VCID-aa65-q5ek-aaaj | https://security.gentoo.org/glsa/201911-01 | 36.0.0 |
| 2024-09-18T07:59:13.454585+00:00 | Gentoo Importer | Affected by | VCID-aa65-q5ek-aaaj | https://security.gentoo.org/glsa/201911-01 | 34.0.1 |
| 2024-01-04T02:03:53.682486+00:00 | Gentoo Importer | Affected by | VCID-aa65-q5ek-aaaj | https://security.gentoo.org/glsa/201911-01 | 34.0.0rc1 |