Red Hat Security Advisory

RHSA-2024:3166

openssh security update

Released 2024-05-22 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 8) openssh-askpass-8.0p1-24.el8
Red Hat Enterprise Linux BaseOS (v. 8) openssh-8.0p1-24.el8, openssh-cavs-8.0p1-24.el8, openssh-clients-8.0p1-24.el8 +4

Fixes 1 record

TI-2020-12413 CVE-2020-15778 · GHSA-cvxm-8hgf-6m6m

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as…

HIGH 69

scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as demonstrated by backtick characters in the destination argument.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.13675 Published 2020-07-24 Partial fix CWE-78