Security
فارسی
All products

Red Hat Enterprise Linux 7/openssh

Red Hat · Package
34 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795 · GHSA-45X7-PX36-X8W8Version ranges need review. russhgolang.org/x/crypto Rust / CargoGoPyPIRed Hat Medium Fix reported
openssh: User enumeration via malformed packets in authentication requestsCVE-2018-15919 Red Hat Enterprise Linux 7/opensshRed Hat Enterprise Linux 8/openssh Red Hat Medium No fix reported
openssh: Improper validation of object names allows malicious server to overwrite files via scp clientCVE-2019-6111 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client outputCVE-2019-6110 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: Missing character encoding in progress display allows for spoofing of scp client outputCVE-2019-6109 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Low No fix reported
openssh: scp client improper directory name validationCVE-2018-20685 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: Observable discrepancy leading to an information leak in the algorithm negotiationCVE-2020-14145 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: scp allows command injection when using backtick characters in the destination argumentCVE-2020-15778 Red Hat Enterprise Linux 5/opensshRed Hat Enterprise Linux 6/openssh Red Hat Medium No fix reported
openssh: potential command injection via shell metacharactersCVE-2023-51385 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: authentication bypass via row hammer attackCVE-2023-51767 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabledCVE-2025-26465 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: OpenSSH SSHD Agent Forwarding and X11 ForwardingCVE-2025-32728 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommandCVE-2025-61985 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommandCVE-2025-61984 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in usernameCVE-2026-35386 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Low No fix reported
OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usageCVE-2026-35387 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Low No fix reported
OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessionsCVE-2026-35388 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Low No fix reported
OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals optionCVE-2026-35414 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of serviceCVE-2026-55653 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported
openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versionsCVE-2026-55655 Red Hat Enterprise Linux 6/opensshRed Hat Enterprise Linux 7/openssh Red Hat Medium No fix reported