Known vulnerabilities in openssh (Debian package) - page 3

Vendor: Debian
Software CPE: cpe:2.3:o:debian:openssh_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 66
Public exploits: 8
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssh (Debian package) openssh (Debian package) is affected by 66 known vulnerabilities: 5 high, 32 medium, 29 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU31989 - Memory corruption
CVE-2017-16231
CWE-119 Low
No
No
- 21.03.2019 SB2019032125
SB2017112322
#VU16990 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2019-6109
CWE-451 Low
No
No
1:7.4p1-10+deb9u5 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 13 more
#VU16988 - Improper input validation
CVE-2019-6111
CWE-20 Low
Available
No
1:7.4p1-10+deb9u5 15.01.2019 SB2019011505
SB2019012805
SB2019012904
and 17 more
#VU16946 - Improper Access Control
CVE-2018-20685
CWE-284 Low
No
No
1:7.4p1-10+deb9u5 10.01.2019 SB2019011505
SB2019012805
SB2019012904
and 14 more
#VU14548 - Exposure of sensitive information to an unauthorized actor
CVE-2018-15919
CWE-200 Low
No
No
- 28.08.2018 SB2018082902
SB2018111705
SB2018082817
and 5 more
#VU14440 - Error Handling
CVE-2018-15473
CWE-388 Medium
Available
No
1:6.7p1-5+deb8u7, 1:7.4p1-10+deb9u4, 1:7.9p1-4 17.08.2018 SB2018081603
SB2018082309
SB2018090702
and 19 more
#VU14163 - NULL Pointer Dereference
CVE-2016-10708
CWE-476 Low
No
No
1:6.0p1-4+deb7u7, 1:6.7p1-5+deb8u6, 1:7.4p1-1 31.07.2018 SB2017032008
SB2018072801
SB2018012101
and 7 more
#VU9333 - Permissions, Privileges, and Access Controls
CVE-2017-15906
CWE-264 Low
No
No
1:6.7p1-5+deb8u7, 1:7.4p1-10+deb9u4, 1:7.6p1-1, 1:7.9p1-4 15.11.2017 SB2017111501
SB2017111502
SB2018010803
and 14 more
#VU32120 - Improper input validation
CVE-2017-7592
CWE-20 Low
No
No
- 09.04.2017 SB2017040902
SB2017042521
SB2017042844
and 3 more
#VU32098 - Divide By Zero
CVE-2016-10266
CWE-369 Medium
No
No
- 24.03.2017 SB2017032407
SB2017050116
SB2017042610
and 4 more
#VU32099 - Divide By Zero
CVE-2016-10267
CWE-369 Medium
No
No
- 24.03.2017 SB2017032408
SB2017050117
SB2017042610
and 4 more
#VU32100 - Out-of-bounds read
CVE-2016-10269
CWE-125 Medium
No
No
- 24.03.2017 SB2017032409
SB2017050119
SB2017042610
and 3 more
#VU32101 - Out-of-bounds read
CVE-2016-10270
CWE-125 Medium
No
No
- 24.03.2017 SB2017032410
SB2017050120
SB2017042610
and 3 more
#VU32102 - Out-of-bounds read
CVE-2016-9273
CWE-125 Low
No
No
- 18.01.2017 SB2017011808
SB2017011321
SB2025021420
and 1 more
#VU2075 - Memory corruption
CVE-2016-10012
CWE-119 Low
No
No
1:6.7p1-5+deb8u6 21.12.2016 SB2016122003
SB2016122004
SB2016122201
and 13 more
#VU719 - Improper Access Control
CVE-2016-0778
CWE-284 High
No
No
1:6.0p1-4+deb7u3, 1:6.7p1-5+deb8u1 03.10.2016 SB2016011401
SB2016011402
SB2016011501
and 17 more
#VU718 - Improper Access Control
CVE-2016-0777
CWE-284 Low
No
No
1:6.0p1-4+deb7u3, 1:6.7p1-5+deb8u1 03.10.2016 SB2016011401
SB2016011402
SB2016011501
and 19 more
#VU31835 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4243
CWE-94 Medium
No
No
- 10.09.2013 SB2013091001
SB2014062401
SB2014062601
and 1 more
#VU31838 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4232
CWE-94 Medium
No
No
- 10.09.2013 SB2013091002
SB2013110602
SB2014062601
and 3 more
#VU31846 - Stack-based buffer overflow
CVE-2006-3459
CWE-121 Medium
Available
No
- 03.08.2006 SB2006080301
SB2012051505


Showing elements 41 - 60 out of 66