Lucene search
GoogleOSV:USN-5666-1HistoryOct 10, 2022 - 5:50 p.m.
openssh vulnerability
2022-10-1017:50:36
Google
osv.dev
12
openssh
vulnerability
helper programs
arbitrary code execution
software
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
Low
EPSS
0.001
Percentile
22.3%
It was discovered that OpenSSH incorrectly handled certain helper programs.
An attacker could possibly use this issue to arbitrary code execution.
Related
ibm
ibm
Security Bulletin: IBM QRadar Network Security is affected by Vulnerability in OpenSSH. (CVE-2021-41617)
2022-07-07 10:45:43
Security Bulletin: IBM App Connect Enterprise Certified Container operands may be vulnerable to privilege escalation due to CVE-2021-41617
2022-06-22 10:25:08
Security Bulletin: Vulnerability in OpenSSH affects AIX (CVE-2021-41617)
2022-05-18 14:03:58
nessus
nessus
SUSE SLED15 / SLES15 Security Update : openssh (SUSE-SU-2021:3950-1)
2021-12-07 00:00:00
SUSE SLES11 Security Update : openssh (SUSE-SU-2021:14847-1)
2021-12-02 00:00:00
Oracle Linux 7 : openssh (ELSA-2021-9575)
2021-12-08 00:00:00
ubuntucve
ubuntucve
CVE-2021-41617
2021-09-26 00:00:00
amazon
amazon
Medium: openssh
2022-02-03 19:30:00
Medium: openssh
2022-02-10 22:00:00
osv
osv
Moderate: openssh security, bug fix, and enhancement update
2022-05-10 06:45:24
CVE-2021-41617
2021-09-26 19:15:07
Moderate: openssh security, bug fix, and enhancement update
2022-05-10 06:45:24
rocky
rocky
openssh security, bug fix, and enhancement update
2022-05-10 06:45:24
openvas
openvas
Fedora: Security Advisory for openssh (FEDORA-2021-fa0e94198f)
2021-10-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:3875-1)
2021-12-03 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2022-2524)
2022-10-10 00:00:00
redhatcve
redhatcve
CVE-2021-41617
2021-09-27 20:04:15
nvd
nvd
CVE-2021-41617
2021-09-26 19:15:07
oraclelinux
oraclelinux
openssh security update
2021-11-24 00:00:00
openssh security update
2021-12-07 00:00:00
openssh security, bug fix, and enhancement update
2022-05-17 00:00:00
suse
suse
Security update for openssh (important)
2021-12-06 00:00:00
mageia
mageia
Updated openssh packages fix security vulnerability
2021-12-19 15:26:08
redhat
redhat
(RHSA-2022:2013) Moderate: openssh security, bug fix, and enhancement update
2022-05-10 06:45:24
(RHSA-2021:4782) Moderate: openssh security update
2021-11-23 14:40:20
(RHSA-2022:4691) Important: Red Hat OpenShift GitOps security update
2022-05-18 22:01:26
centos
centos
openssh, pam_ssh_agent_auth security update
2021-12-01 19:19:31
ubuntu
ubuntu
OpenSSH vulnerability
2022-10-10 00:00:00
OpenSSH vulnerabilities
2024-01-03 00:00:00
veracode
veracode
Privilege Escalation
2021-10-06 11:24:31
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0440
2021-10-10 00:00:00
Important Photon OS Security Update - PHSA-2021-0440
2021-10-10 00:00:00
Important Photon OS Security Update - PHSA-2021-3.0-0313
2021-10-15 00:00:00
paloalto
paloalto
Informational: Impact of the OpenSSH Vulnerability CVE-2021-41617 on PAN-OS
2021-11-30 18:15:00
cvelist
cvelist
CVE-2021-41617
2021-09-26 00:00:00
broadcom
broadcom
A flaw in OpenSSH helper programs could lead to local privilege escalation
2023-08-01 00:00:00
fedora
fedora
[SECURITY] Fedora 34 Update: openssh-8.6p1-5.fc34
2021-10-02 01:29:48
[SECURITY] Fedora 33 Update: openssh-8.4p1-8.fc33
2021-10-14 16:03:28
[SECURITY] Fedora 35 Update: openssh-8.7p1-2.fc35
2021-10-03 00:15:11
cbl_mariner
cbl_mariner
CVE-2021-41617 affecting package openssh 8.5p1-3
2021-10-14 02:25:47
almalinux
almalinux
Moderate: openssh security, bug fix, and enhancement update
2022-05-10 06:45:24
prion
prion
Privilege escalation
2021-09-26 19:15:00
debiancve
debiancve
CVE-2021-41617
2021-09-26 19:15:07
cve
cve
CVE-2021-41617
2021-09-26 19:15:07
f5
f5
K12705583 : OpenSSH vulnerability CVE-2021-41617
2021-12-06 00:00:00
freebsd
freebsd
alpinelinux
alpinelinux
CVE-2021-41617
2021-09-26 19:15:07
aix
aix
Vulnerabilities in OpenSSH affect AIX.
2022-01-06 09:17:41
debian
debian
[SECURITY] [DLA 3694-1] openssh security update
2023-12-26 02:22:30
[SECURITY] [DSA 5586-1] openssh security update
2023-12-22 08:59:42
cloudfoundry
cloudfoundry
USN-6565-1: OpenSSH vulnerabilities | Cloud Foundry
2024-02-29 00:00:00
hp
hp
HP ThinPro 8.0 SP 9 Security Updates
2024-06-17 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2022
2022-07-19 00:00:00
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
ics
ics
Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1
2023-12-14 12:00:00
avleonov
avleonov
CVSS2
4.4
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:M/Au:N/C:P/I:P/A:P
CVSS3
7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.8
Confidence
Low
EPSS
0.001
Percentile
22.3%
Related for OSV:USN-5666-1