Security
فارسی
All products

Red Hat Enterprise Linux 6/openssh

Red Hat · Package
40 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795 · GHSA-45X7-PX36-X8W8Version ranges need review. russhgolang.org/x/crypto Rust / CargoGoPyPIRed Hat Medium Fix reported
openssh: forced command option information disclosureCVE-2012-0814 Red Hat Enterprise Linux 6/openssh Red Hat Low No fix reported
openssh: Denial of service via very long passwordsCVE-2016-6515 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression supportCVE-2016-10012 Red Hat Enterprise Linux 4/opensshRed Hat Enterprise Linux 5/openssh Red Hat Low No fix reported
openssh: Leak of host private key material to privilege-separated child process via realloc()CVE-2016-10011 Red Hat Enterprise Linux 4/opensshRed Hat Enterprise Linux 5/openssh Red Hat Low No fix reported
openssh: loading of untrusted PKCS#11 modules in ssh-agentCVE-2016-10009 Red Hat Enterprise Linux 4/opensshRed Hat Enterprise Linux 5/openssh Red Hat Medium No fix reported
openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of serviceCVE-2016-10708 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Low No fix reported
openssh: Improper validation of object names allows malicious server to overwrite files via scp clientCVE-2019-6111 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client outputCVE-2019-6110 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: Missing character encoding in progress display allows for spoofing of scp client outputCVE-2019-6109 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Low No fix reported
openssh: scp client improper directory name validationCVE-2018-20685 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: Observable discrepancy leading to an information leak in the algorithm negotiationCVE-2020-14145 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: scp allows command injection when using backtick characters in the destination argumentCVE-2020-15778 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configuredCVE-2021-41617 Red Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: potential command injection via shell metacharactersCVE-2023-51385 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: authentication bypass via row hammer attackCVE-2023-51767 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabledCVE-2025-26465 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: OpenSSH SSHD Agent Forwarding and X11 ForwardingCVE-2025-32728 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommandCVE-2025-61985 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommandCVE-2025-61984 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported