Red Hat Enterprise Linux 5/openssh

Red Hat · Package

24 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
openssh: post-authentication resource exhaustion bug via GSSAPICVE-2011-5000	Red Hat Enterprise Linux 4/openssh Red Hat Enterprise Linux 5/openssh	Red Hat	Low	No fix reported	Not recorded
openssh: Prevent connection slot exhaustion attacksCVE-2010-5107	Red Hat Enterprise Linux 5/openssh	Red Hat	Low	No fix reported	Not recorded
openssh: AcceptEnv environment restriction bypass flawCVE-2014-2532	Red Hat Enterprise Linux 5/openssh	Red Hat	Low	No fix reported	Not recorded
openssh: failure to check DNS SSHFP records in certain scenariosCVE-2014-2653	Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: XSECURITY restrictions bypass under certain conditions in ssh(1)CVE-2015-5352	Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevicesCVE-2015-5600	Red Hat Enterprise Linux 4/openssh Red Hat Enterprise Linux 5/openssh	Red Hat	Low	No fix reported	Not recorded
openssh: Use-after-free bug related to PAM supportCVE-2015-6564	Red Hat Enterprise Linux 4/openssh Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: Privilege separation weakness related to PAM supportCVE-2015-6563	Red Hat Enterprise Linux 4/openssh Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: possible fallback from untrusted to trusted X11 forwardingCVE-2016-1908	Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: missing sanitisation of input for X11 forwardingCVE-2016-3115	Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: privilege escalation via user's PAM environment and UseLogin=yesCVE-2015-8325	Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: User enumeration via covert timing channelCVE-2016-6210	Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: Denial of service via very long passwordsCVE-2016-6515	Red Hat Enterprise Linux 5/openssh Red Hat Enterprise Linux 6/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: Bounds check can be evaded in the shared memory manager used by pre-authentication compression supportCVE-2016-10012	Red Hat Enterprise Linux 4/openssh Red Hat Enterprise Linux 5/openssh	Red Hat	Low	No fix reported	Not recorded
openssh: Leak of host private key material to privilege-separated child process via realloc()CVE-2016-10011	Red Hat Enterprise Linux 4/openssh Red Hat Enterprise Linux 5/openssh	Red Hat	Low	No fix reported	Not recorded
openssh: loading of untrusted PKCS#11 modules in ssh-agentCVE-2016-10009	Red Hat Enterprise Linux 4/openssh Red Hat Enterprise Linux 5/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: Out of sequence NEWKEYS message can allow remote attacker to cause denial of serviceCVE-2016-10708	Red Hat Enterprise Linux 5/openssh Red Hat Enterprise Linux 6/openssh	Red Hat	Low	No fix reported	Not recorded
openssh: User enumeration via malformed packets in authentication requestsCVE-2018-15473	Red Hat Enterprise Linux 5/openssh	Red Hat	Low	No fix reported	Not recorded
openssh: Improper validation of object names allows malicious server to overwrite files via scp clientCVE-2019-6111	Red Hat Enterprise Linux 5/openssh Red Hat Enterprise Linux 6/openssh	Red Hat	Medium	No fix reported	Not recorded
openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client outputCVE-2019-6110	Red Hat Enterprise Linux 5/openssh Red Hat Enterprise Linux 6/openssh	Red Hat	Medium	No fix reported	Not recorded