Gentoo Linux Security Advisory 202007-53 - Multiple vulnerabilities have been found in Dropbear, the worst of which could result in a Denial of Service condition. Versions less than 2020.80 are affected.
bf9fd48b18e37dee9a2fbb168f4879020b4729bf4ab4e4dbef27abcb75ed8138
Red Hat Security Advisory 2019-3702-01 - OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Character encoding and input validation flaws were addressed.
109adad504963c35a3d9c8b030f02e7758216f3beb34099c5e035ce79cc05780
Gentoo Linux Security Advisory 201903-16 - Multiple vulnerabilities have been found in OpenSSH, the worst of which could allow a remote attacker to gain unauthorized access. Versions less than 7.9_p1-r4 are affected.
d68beb4aab2e5a86879d48afdedd8d8a52f988a08fb98a1e281194756651b347
Debian Linux Security Advisory 4387-1 - Harry Sintonen from F-Secure Corporation discovered multiple vulnerabilities in OpenSSH, an implementation of the SSH protocol suite. All the vulnerabilities are in found in the scp client implementing the SCP protocol.
6c0fb736b4beddde6c918aa8b4223d25be2803590c6188c24970d558ae469ec0
Ubuntu Security Notice 3885-1 - Harry Sintonen discovered multiple issues in the OpenSSH scp utility. If a user or automated system were tricked into connecting to an untrusted server, a remote attacker could possibly use these issues to write to arbitrary files, change directory permissions, and spoof client output.
081649ccfa282b9f8eeb5c454b5712ab60990d297495d610ee10e4ab2229c421
Many scp clients fail to verify if the objects returned by the scp server match those it asked for. This issue dates back to 1983 and rcp, on which scp is based. A separate flaw in the client allows the target directory attributes to be changed arbitrarily. Finally, two vulnerabilities in clients may allow server to spoof the client output.
7fa072fc8f371c8cc4668eb863810286b6651faaf3b8efdcdeee1bc7d0a40099