CVE-2019-6110Medium· 6.8▾ TwilightPoC availableIn OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 37.4 · likelihood 4.2 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Public exploit / PoC code seen in 1 source. Availability, not in-the-wild use.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
21%
Exploit-DB (last check)
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.
openssh <= 7.9winscp <= 5.13element_softwareontap_select_deploystorage_automation_storescalance_x204rna_firmware < 3.2.7scalance_x204rna_eec_firmware < 3.2.7Upgrade past the affected range:
scalance_x204rna_firmware 3.2.7scalance_x204rna_eec_firmware 3.2.7Connected by shared product, vendor, weakness, or advisory.
CVE-2019-6111Medium· 5.9An issue was discovered in OpenSSH 7.9
CVE-2019-16905High· 7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key
CVE-2019-6109Medium· 6.8An issue was discovered in OpenSSH 7.9
CVE-2020-15778High· 7.4scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument
CVE-2020-14145Medium· 5.9The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation
CVE-2020-12062High· 7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client's download di…