Known vulnerabilities in openssh (Debian package) - page 3

Vendor: Debian
Software CPE: cpe:2.3:o:debian:openssh_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 66
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openssh (Debian package) openssh (Debian package) is affected by 66 known vulnerabilities: 5 high, 32 medium, 29 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32172 - Out-of-bounds read
CVE-2016-3625
CWE-125 Medium
No
No
- 03.10.2016 SB2016100309
SB2017011328
#VU32171 - Out-of-bounds write
CVE-2016-3624
CWE-787 Medium
No
No
- 03.10.2016 SB2016100308
SB2017011327
#VU32170 - Divide By Zero
CVE-2016-3623
CWE-369 Medium
No
No
- 03.10.2016 SB2016100307
SB2017011326
SB2017040847
#VU32169 - Divide By Zero
CVE-2016-3622
CWE-369 Medium
No
No
- 03.10.2016 SB2016100306
SB2017011325
SB2017040847
#VU32168 - Out-of-bounds read
CVE-2016-3621
CWE-125 High
No
No
- 03.10.2016 SB2016100305
SB2017011324
SB2025021420
#VU719 - Improper Access Control
CVE-2016-0778
CWE-284 High
No
No
1:6.0p1-4+deb7u3, 1:6.7p1-5+deb8u1 03.10.2016 SB2016011401
SB2016011402
SB2016011501
and 17 more
#VU718 - Improper Access Control
CVE-2016-0777
CWE-284 Low
No
No
1:6.0p1-4+deb7u3, 1:6.7p1-5+deb8u1 03.10.2016 SB2016011401
SB2016011402
SB2016011501
and 19 more
#VU32197 - Heap-based Buffer Overflow
CVE-2016-3991
CWE-122 Medium
No
No
- 21.09.2016 SB2016092137
SB2016121617
#VU32196 - Heap-based Buffer Overflow
CVE-2016-3990
CWE-122 Medium
No
No
- 21.09.2016 SB2016092136
SB2016121616
#VU255 - Exposure of sensitive information to an unauthorized actor
CVE-2016-6210
CWE-200 Medium
Available
No
1:6.7p1-5+deb8u3, 1:7.2p2-6 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 16 more
#VU254 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
#VU253 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
#VU252 - Resource exhaustion
CVE-2016-6515
CWE-400 Medium
Available
No
- 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 11 more
#VU251 - Permissions, Privileges, and Access Controls
CVE-2015-8325
CWE-264 Low
No
No
1:6.0p1-4+deb7u4, 1:6.7p1-5+deb8u2, 1:7.2p2-3 02.08.2016 SB2016080201
SB2016080202
SB2016080203
and 10 more
#VU32278 - Memory corruption
CVE-2015-8683
CWE-119 Low
No
No
- 13.04.2016 SB2016041310
SB2016070420
SB2022021828
and 1 more
#VU32276 - Memory corruption
CVE-2015-8665
CWE-119 Low
No
No
- 13.04.2016 SB2016041309
SB2016070417
SB2022021828
and 1 more
#VU32277 - Out-of-bounds write
CVE-2015-8781
CWE-787 Medium
No
No
- 01.02.2016 SB2016020102
SB2016070418
#VU32195 - Heap-based Buffer Overflow
CVE-2015-8668
CWE-122 High
No
No
- 08.01.2016 SB2016010801
SB2016121613
SB2025021407
#VU32525 - Memory corruption
CVE-2013-4244
CWE-119 Medium
No
No
- 28.09.2013 SB2013092802
SB2014062402
SB2014062601
and 2 more
#VU31838 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-4232
CWE-94 Medium
No
No
- 10.09.2013 SB2013091002
SB2013110602
SB2014062601
and 2 more


Showing elements 41 - 60 out of 66