Browse CVEs

HIGH 7.8 CVE-2016-6240 Integer truncation error in the amap_alloc function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a … OpenBSD No fix yet Fix from $1,9502017-03-07 HIGH 7.8 CVE-2016-6241 Integer overflow in the amap_alloc1 function in OpenBSD 5.8 and 5.9 allows local users to execute arbitrary code with kernel privileges via a large s… OpenBSD No fix yet Fix from $1,9502017-03-07 MEDIUM 5.5 CVE-2016-6239 The mmap extension __MAP_NOFAULT in OpenBSD 5.8 and 5.9 allows attackers to cause a denial of service (kernel panic and crash) via a large size value. OpenBSD No fix yet Fix from $1,6002017-03-07 MEDIUM 5.5 CVE-2016-6242 OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (assertion failure and kernel panic) via a large ident value in a kevent system c… OpenBSD No fix yet Fix from $1,6002017-03-07 MEDIUM 5.5 CVE-2016-6243 thrsleep in kern/kern_synch.c in OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a crafted value in the tsp pa… OpenBSD No fix yet Fix from $1,6002017-03-07 MEDIUM 5.5 CVE-2016-6245 OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (kernel panic) via a large size in a getdents system call. OpenBSD No fix yet Fix from $1,6002017-03-07 MEDIUM 5.5 CVE-2016-6247 OpenBSD 5.8 and 5.9 allows certain local users to cause a denial of service (kernel panic) by unmounting a filesystem with an open vnode on the mnt_v… OpenBSD No fix yet Fix from $1,6002017-03-07 MEDIUM 5.5 CVE-2016-6350 OpenBSD 5.8 and 5.9 allows local users to cause a denial of service (NULL pointer dereference and panic) via a sysctl call with a path starting with … OpenBSD Patch available Fix from $1,6002017-03-07 MEDIUM 5.5 CVE-2016-6522 Integer overflow in the uvm_map_isavail function in uvm/uvm_map.c in OpenBSD 5.9 allows local users to cause a denial of service (kernel panic) via a… OpenBSD Patch available Fix from $1,6002017-03-07 HIGH 7.5 CVE-2016-6244 The sys_thrsigdivert function in kern/kern_sig.c in the OpenBSD kernel 5.9 allows remote attackers to cause a denial of service (panic) via a negativ… OpenBSD No fix yet Fix from $1,9502017-03-07 MEDIUM 5.9 CVE-2016-6210EPSS 89% sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the username do… Openssh after 7.2 Fix from $1,6002017-02-13 HIGH 7.8 CVE-2016-10012 The shared memory manager (associated with pre-authentication compression) in sshd in OpenSSH before 7.4 does not ensure that a bounds check is enfor… Openssh after 7.3 Fix from $1,9502017-01-05 HIGH 7.3 CVE-2016-10009EPSS 37% Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS#11 modu… Openssh after 7.3 Fix from $1,9502017-01-05 HIGH 7.0 CVE-2016-10010 sshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain sockets as root, which might allow local users to ga… Openssh after 7.3 Fix from $1,9502017-01-05 MEDIUM 6.2 CVE-2016-10011 authfile.c in sshd in OpenSSH before 7.4 does not properly consider the effects of realloc on buffer contents, which might allow local users to obtai… Openssh after 7.3 Fix from $1,6002017-01-05 HIGH 7.5 CVE-2016-8858EPSS 29% The kex_input_kexinit function in kex.c in OpenSSH 6.x and 7.x through 7.3 allows remote attackers to cause a denial of service (memory consumption) … Openssh Patch available Fix from $1,9502016-12-09 MEDIUM 6.4 CVE-2016-3115EPSS 37% Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-comman… Openssh after 7.2 Fix from $1,6002016-03-22 MEDIUM 5.3 CVE-2016-1907EPSS 14% The ssh_packet_read_poll2 function in packet.c in OpenSSH before 7.1p2 allows remote attackers to cause a denial of service (out-of-bounds read and a… Openssh Mitigation only Fix from $1,6002016-01-19 HIGH 7.2 CVE-2015-6565 sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disrupti… Openssh No fix yet Fix from $1,9502015-08-24 HIGH 7.0 CVE-2015-6564 Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow l… Openssh after 6.9 Fix from $1,9502015-08-24 MEDIUM 6.4 CVE-2015-6563 The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, w… Openssh after 10.11.0 Fix from $1,6002015-08-24 HIGH 8.1 CVE-2015-5600EPSS 9% The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive dev… Openssh after 6.9 Fix from $1,9502015-08-03 HIGH 7.5 CVE-2014-9424 Double free vulnerability in the ssl_parse_clienthello_use_srtp_ext function in d1_srtp.c in LibreSSL before 2.1.2 allows remote attackers to cause a… Libressl after 2.1.1 Fix from $1,9502014-12-29 MEDIUM 5.0 CVE-2013-2125 OpenSMTPD before 5.3.2 does not properly handle SSL sessions, which allows remote attackers to cause a denial of service (connection blocking) by kee… Opensmtpd after 5.3.1 Fix from $1,6002014-05-27 MEDIUM 6.5 CVE-2014-2653 The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR c… Openssh after 6.6 Fix from $1,6002014-03-27 MEDIUM 5.5 CVE-2011-4327 ssh-keysign.c in ssh-keysign in OpenSSH before 5.8p2 on certain platforms executes ssh-rand-helper with unintended open file descriptors, which allow… Openssh after 5.8 Fix from $1,6002014-02-03 HIGH 7.3 CVE-2014-1692 The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initialize certai… Openssh after 6.4 Fix from $1,9502014-01-29 MEDIUM 6.0 CVE-2013-4548 The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memo… Openssh Mitigation only Fix from $1,6002013-11-08 HIGH 7.5 CVE-2010-5107EPSS 17% The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which make… Openssh after 6.1 Fix from $1,9502013-03-07 MEDIUM 6.5 CVE-2012-0814 The auth_parse_options function in auth-options.c in sshd in OpenSSH before 5.7 provides debug messages containing authorized_keys command options, w… Openssh after 5.6 Fix from $1,6002012-01-27