openssh | Snyk

Direct Vulnerabilities

Known vulnerabilities in the openssh package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Expired Pointer Dereference	<0:9.9p1-16.amzn2023.0.1
M Authentication Bypass by Primary Weakness	<0:9.9p1-16.amzn2023.0.1
M OS Command Injection	<0:9.9p1-16.amzn2023.0.1
M Exposure of Data Element to Wrong Session	<0:9.9p1-16.amzn2023.0.1
M Improper Handling of Highly Compressed Data (Data Amplification)	<0:9.9p1-16.amzn2023.0.1
M Incorrect Privilege Assignment	<0:9.9p1-16.amzn2023.0.1
M Privilege Defined With Unsafe Actions	<0:9.9p1-16.amzn2023.0.1
M Improper Restriction of Excessive Authentication Attempts	<0:9.9p1-16.amzn2023.0.1
M Improper Restriction of Excessive Authentication Attempts	<0:9.9p1-16.amzn2023.0.1
M Improperly Implemented Security Check for Standard	<0:9.9p1-16.amzn2023.0.1
M Missing Initialization of Resource	<0:9.9p1-16.amzn2023.0.1
M Directory Traversal	<0:9.9p1-16.amzn2023.0.1
M Improper Certificate Validation	<0:9.9p1-16.amzn2023.0.1
M Arbitrary Argument Injection	<0:9.9p1-16.amzn2023.0.1
M Misinterpretation of Input	<0:9.9p1-16.amzn2023.0.1
M Directory Traversal	<0:9.9p1-16.amzn2023.0.1
M Information Exposure	<0:9.9p1-16.amzn2023.0.1
M Incomplete Cleanup	<0:9.9p1-16.amzn2023.0.1
M Double Free	<0:9.9p1-10.amzn2023.0.1
M Directory Traversal	<0:9.9p1-10.amzn2023.0.1
M Expired Pointer Dereference	<0:9.9p1-10.amzn2023.0.1
M Improper Restriction of Communication Channel to Intended Endpoints	<0:9.9p1-10.amzn2023.0.1
M Improper Handling of Inconsistent Special Elements	<0:8.7p1-8.amzn2023.0.18
M Missing Authentication for Critical Function	<0:8.7p1-8.amzn2023.0.18
M OS Command Injection	<0:8.7p1-8.amzn2023.0.18
M Access of Uninitialized Pointer	<0:8.7p1-8.amzn2023.0.18
M Misinterpretation of Input	<0:8.7p1-8.amzn2023.0.18
H Improper Preservation of Permissions	<0:8.7p1-8.amzn2023.0.17
L Failure to Sanitize Special Element	<0:8.7p1-8.amzn2023.0.16
L Improper Neutralization of Null Byte or NUL Character	<0:8.7p1-8.amzn2023.0.16
L Expected Behavior Violation	<0:8.7p1-8.amzn2023.0.15
M Detection of Error Condition Without Action	<0:8.7p1-8.amzn2023.0.14
H Race Condition	<0:8.7p1-8.amzn2023.0.12
H Race Condition	<0:8.7p1-8.amzn2023.0.11
M OS Command Injection	<0:8.7p1-8.amzn2023.0.10
M Truncation of Security-relevant Information	<0:8.7p1-8.amzn2023.0.9
H Arbitrary Code Injection	<0:8.7p1-8.amzn2023.0.7

Vulnerability

Vulnerable Version

Expired Pointer Dereference

<0:9.9p1-16.amzn2023.0.1