Known vulnerabilities in openssh (Ubuntu package) - page 2

Software CPE: cpe:2.3:o:canonical:openssh_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 32
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssh (Ubuntu package) openssh (Ubuntu package) is affected by 32 known vulnerabilities: 8 medium, 24 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109
CWE-451 Low
No
No
1:6.6p1-2ubuntu2.12, 1:7.2p2-4ubuntu2.7, 1:7.6p1-4ubuntu0.2, 1:7.7p1-4ubuntu0.2 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16946 - Improper Access Control
CVE-2018-20685
CWE-284 Low
No
No
1:6.6p1-2ubuntu2.12, 1:7.2p2-4ubuntu2.7, 1:7.6p1-4ubuntu0.2, 1:7.7p1-4ubuntu0.2 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more
#VU14440 - Error Handling
CVE-2018-15473
CWE-388 Medium
Available
No
1:6.6p1-2ubuntu2.11, 1:7.2p2-4ubuntu2.6, 1:7.6p1-4ubuntu0.1 17.08.2018 SB2018081603
SB2018082309
SB2018090702
and 19 more
#VU14163 - NULL Pointer Dereference
CVE-2016-10708
CWE-476 Low
No
No
1:6.6p1-2ubuntu2.11, 1:7.2p2-4ubuntu2.6, 1:7.6p1-4ubuntu0.1 31.07.2018 SB2017032008
SB2018072801
SB2018012101
and 7 more
#VU2075 - Memory corruption
CVE-2016-10012
CWE-119 Low
No
No
- 21.12.2016 SB2016122003
SB2016122004
SB2016122201
and 13 more
#VU2015 - Improper input validation
CVE-2016-10009
CWE-20 Low
Available
No
- 19.12.2016 SB2016122003
SB2017011102
SB2016122004
and 21 more
#VU1033 - Missing release of memory after effective lifetime
CVE-2016-8858
CWE-401 Medium
No
No
- 21.10.2016 SB2016102101
SB2016102102
SB2016102103
#VU255 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6210
CWE-200 Medium
Available
No
1:5.9p1-5ubuntu1.10, 1:6.6p1-2ubuntu2.8, 1:7.2p2-4ubuntu2.1 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 16 more
#VU254 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
#VU253 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
#VU252 - Resource exhaustion
CVE-2016-6515
CWE-400 Medium
Available
No
1:5.9p1-5ubuntu1.10, 1:6.6p1-2ubuntu2.8, 1:7.2p2-4ubuntu2.1 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 11 more
#VU251 - Permissions, Privileges, and Access Controls
CVE-2015-8325
CWE-264 Low
No
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 10 more


Showing elements 21 - 40 out of 32