CVE-2014-2653

概要

参考情報

• advisories.mageia.org/MGASA-2014-0166.html
• aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc
• lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html
• lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html
• marc.info
• openwall.com/lists/oss-security/2014/03/26/7
• rhn.redhat.com/errata/RHSA-2014-1552.html
• rhn.redhat.com/errata/RHSA-2015-0425.html
• secunia.com/advisories/59855
• debian.org/security/2014/dsa-2894
• mandriva.com/security/advisories
• mandriva.com/security/advisories
• oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

openssh のその他の脆弱性

• CVE-2026-106583高 7.8In ssh in OpenSSH before 10.6, a $ or \ character can occur in a command-line username, leading to injection.
• CVE-2026-106587低 3.3In sshd in OpenSSH before 10.6, the value "none" for a configuration option is sometimes interpreted as a filename but was intended to mean …
• CVE-2026-106586中 4.3In sshd in OpenSSH before 10.6, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not, a …
• CVE-2026-106585中 6.5In sshd and ssh in OpenSSH before 10.6, there is no check for whether the maximum packet length is exceeded during decompression of highly c…
• CVE-2026-106584低 3.3In ssh-keygen in OpenSSH before 10.6, certificates could have incorrect expiration times because of Daylight Saving mishandling. There can b…