This update for openssh fixes the following issues :

  - CVE-2020-14145: Fixed a potential information leak     during host key exchange (bsc#1173513).

  - Supplement libgtk-3-0 instead of libX11-6 to avoid     installation on a textmode install (bsc#1142000)

  - Fixed an issue where oracle cluster with cluvfy using     'scp' failing/missinterpreted (bsc#1148566).

  - Fixed sshd termination of multichannel sessions with     non-root users (bsc#1115550,bsc#1174162).

  - Added speculative hardening for key storage     (bsc#1139398). 

This update was imported from the SUSE:SLE-15-SP1:Update update project.

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The client side in OpenSSH 5.7 through 8.3 has an     Observable Discrepancy leading to an information leak     in the algorithm negotiation. This allows     man-in-the-middle attackers to target initial     connection attempts (where no host key for the server     has been cached by the client).(CVE-2020-14145)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openssh packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability :

  - The client side in OpenSSH 5.7 through 8.4 has an     Observable Discrepancy leading to an information leak     in the algorithm negotiation. This allows     man-in-the-middle attackers to target initial     connection attempts (where no host key for the server     has been cached by the client).(CVE-2020-14145)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the openssh packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - ssh-agent in OpenSSH before 8.5 has a double free that     may be relevant in a few less-common scenarios, such as     unconstrained agent-socket access on a legacy operating     system, or the forwarding of an agent to an     attacker-controlled host.(CVE-2021-28041)

  - A flaw was found in OpenSSH in versions 5.7 through     8.3, where an Observable Discrepancy occurs and leads     to an information leak in the algorithm negotiation.
    This flaw allows a man-in-the-middle attacker to target     initial connection attempts, where there is no host key     for the server that has been cached by the     client.(CVE-2020-14145)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-202105-35 (OpenSSH: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in OpenSSH. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, able to access the socket of the forwarding agent,       might be able to execute arbitrary code with the privileges of the       process or cause a Denial of Service condition.
      Furthermore, a remote attacker might conduct a man-in-the-middle attack       targeting initial connection attempts where no host key for the server       has been cached by client yet.
  Workaround :

    There is no known workaround at this time.

This update for openssh fixes the following issues :

CVE-2020-14145: Fixed an observable discrepancy leading to an information leak in the algorithm negotiation (bsc#1173513).

Fixed an issue where AuthorizedKeysCommand produced a lot of output (bsc#1161684).

Fixed an issue where oracle cluster with cluvfy using 'scp' failing/missinterpreted (bsc#1148566).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the version of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - The client side in OpenSSH 5.7 through 8.4 has an     Observable Discrepancy leading to an information leak     in the algorithm negotiation. This allows     man-in-the-middle attackers to target initial     connection attempts (where no host key for the server     has been cached by the client).(CVE-2020-14145)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:4368 advisory.

  - The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in     the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts     (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and     8.6 are also affected. (CVE-2020-14145)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.9 / 16.1.4 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K48050136 advisory.

    The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in     the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts     (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and     8.6 are also affected.(CVE-2020-14145)ImpactSSH sessions may be vulnerable to a man-in-the-middle attack.

Tenable has extracted the preceding description block directly from the F5 Networks BIG-IP security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:4368 advisory.

  - The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in     the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts     (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and     8.6 are also affected. (CVE-2020-14145)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2022:0215 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2021-41617:
      sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows     privilege escalation because supplemental groups are not initialized as expected. Helper programs for     AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group     memberships of the sshd process, if the configuration specifies running the command as a different user.

      CVE-2020-14145:
      The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak     in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection     attempts (where no host key for the server has been cached by the client). NOTE: some reports state that     8.5 and 8.6 are also affected.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0541 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2023-48795:
    An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a     malicious server (or Man-in-The-Middle attacker) can employ crafted object names to manipulate the client     output, e.g., by using ANSI control codes to hide additional files being transferred. This affects     refresh_progress_meter() in progressmeter.c.

    CVE-2023-51385:
    An issue was discovered in OpenSSH 7.9. Due to the scp implementation being derived from 1983 rcp, the     server chooses which files/directories are sent to the client. However, the scp client only performs     cursory validation of the object name returned (only directory traversal attacks are prevented). A     malicious scp server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the scp client     target directory. If recursive operation (-r) is performed, the server can manipulate subdirectories as     well (for example, to overwrite the .ssh/authorized_keys file).

    CVE-2019-6109:
    In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious     server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control     codes to hide additional files being transferred.

    CVE-2020-14145:
    In OpenSSH 7.9, scp.c in the scp client allows remote SSH servers to bypass intended access restrictions     via the filename of . or an empty filename. The impact is modifying the permissions of the target     directory on the client side.

    CVE-2019-6110:
    In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell     metacharacters, and this name is referenced by an expansion token in certain situations. For example, an     untrusted Git repository can have a submodule with shell metacharacters in a user name or host name.

    CVE-2019-6111:
    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other     products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the     extension negotiation message), and a client and server may consequently end up with a connection for     which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because     the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and     mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of     ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and     (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API     before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80,     AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0,     Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15,     SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH     through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang     XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd     through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and     LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3,     Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server     before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the     mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh     crate before 0.40.2 for Rust.

    CVE-2020-15778:
    ** DISPUTED ** scp in OpenSSH through 8.3p1 allows command injection in the scp.c toremote function, as     demonstrated by backtick characters in the destination argument. NOTE: the vendor reportedly has stated     that they intentionally omit validation of anomalous argument transfers because that could stand a     great chance of breaking existing workflows.

    CVE-2018-20685:
    The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in     the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts     (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and     8.6 are also affected.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
145297	openSUSE Security Update : openssh (openSUSE-2020-2298)	Nessus	SuSE Local Security Checks	2021/1/25	2025/10/21	medium
146263	EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1251)	Nessus	Huawei Local Security Checks	2021/2/5	2025/10/21	medium
147077	EulerOS Virtualization for ARM 64 3.0.6.0 : openssh (EulerOS-SA-2021-1541)	Nessus	Huawei Local Security Checks	2021/3/4	2025/10/21	medium
148631	EulerOS Virtualization 2.9.1 : openssh (EulerOS-SA-2021-1720)	Nessus	Huawei Local Security Checks	2021/4/15	2025/10/21	high
157020	GLSA-202105-35 : OpenSSH: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2022/1/24	2025/10/21	high
144351	SUSE SLES12 Security Update : openssh (SUSE-SU-2020:3844-1)	Nessus	SuSE Local Security Checks	2020/12/17	2025/10/21	medium
145734	EulerOS 2.0 SP8 : openssh (EulerOS-SA-2021-1159)	Nessus	Huawei Local Security Checks	2021/2/1	2025/10/21	medium
146262	EulerOS 2.0 SP9 : openssh (EulerOS-SA-2021-1270)	Nessus	Huawei Local Security Checks	2021/2/5	2025/10/21	medium
148058	EulerOS 2.0 SP5 : openssh (EulerOS-SA-2021-1694)	Nessus	Huawei Local Security Checks	2021/3/24	2025/10/21	medium
157667	AlmaLinux 8 : openssh (ALSA-2021:4368)	Nessus	Alma Linux Local Security Checks	2022/2/9	2025/10/21	medium
166567	F5 Networks BIG-IP : OpenSSH client vulnerability (K48050136)	Nessus	F5 Networks Local Security Checks	2022/10/26	2025/10/21	medium
184641	Rocky Linux 8 : openssh (RLSA-2021:4368)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2025/10/21	medium
239762	TencentOS Server 3: openssh (TSSA-2022:0215)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	high
247820	TencentOS Server 2: openssh (TSSA-2025:0541)	Nessus	Tencent Local Security Checks	2025/8/11	2025/12/4	medium

检测

插件搜索

medium

medium

medium

high

high

medium

medium

medium

medium

medium

medium

medium

high

medium