org.apache.sshd:sshd-common@2.9.0 vulnerabilities
latest version
2.15.0
latest non vulnerable version
first published
6 years ago
latest version published
1 months ago
licenses detected
- [2.1.0,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.apache.sshd:sshd-common package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value through the integrity check process. An attacker can manipulate the communication by intercepting and dropping specific packets, leading to a compromised connection where security features may be downgraded or disabled (Terrapin attack). Note: Both the client and the server implementation must have mitigations applied against this issue, otherwise the connection may still be affected. How to fix Improper Validation of Integrity Check Value? Upgrade | [,2.12.0) |
Affected versions of this package are vulnerable to Information Exposure. In SFTP servers implemented using Apache MINA SSHD that use a How to fix Information Exposure? Upgrade | [1.0.0,2.10.0) |
Affected versions of this package are vulnerable to Deserialization of Untrusted Data via How to fix Deserialization of Untrusted Data? Upgrade | [,2.9.2) |