CVE-2020-14145Medium· 5.9▾ SunlitThe client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for th…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 32.5 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
2.1%
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
openssh >= 5.7, < 8.4openssh = 8.4openssh = 8.5openssh = 8.6aff_a700s_firmwareactive_iq_unified_manager >= 9.5hci_management_nodeontap_select_deploy_administration_utilitysolidfiresteelstore_cloud_integrated_storagehci_compute_nodehci_storage_nodeUpgrade past the affected range:
openssh 8.4Connected by shared product, vendor, weakness, or advisory.
CVE-2020-15778High· 7.4scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument
CVE-2020-12062High· 7.5The scp client in OpenSSH 8.2 incorrectly sends duplicate responses to the server upon a utimes system call failure, which allows a malicious unprivileged user on the remote server to overwrite arbitrary files in the client's download di…
CVE-2019-16905High· 7.8OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled with an experimental key type, has a pre-authentication integer overflow if a client or server is configured to use a crafted XMSS key
CVE-2019-6109Medium· 6.8An issue was discovered in OpenSSH 7.9
CVE-2019-6110Medium· 6.8In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files …
CVE-2019-6111Medium· 5.9An issue was discovered in OpenSSH 7.9