İçeriğe atla
Noroxi

OpenBSD kayıtları

OpenBSD üreticisine ait 370 yayımlanmış kayıt. Bunların 2 tanesi sahada sömürüldü (CISA KEV listesinde), 8 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
2 · %0,5
Silahlaştırılmış
8 · %2,2
Pre-auth RCE
44
Düzeltme kaydı olan
%43,8
Yayından KEV’e ortanca
395 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

370 kayıt
  • CVE-2020-7247
    99Hemen

    smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary co

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    openbsd · opensmtpd29 Oca 2020

  • CVE-2026-123158
    68Bu hafta

    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related

    YüksekCVSS 8,1KEVSilahlaştırılmışEPSS %18

    openbsd · openssh5 Kas 2026

  • CVE-2023-38408
    63Bu hafta

    The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if

    KritikCVSS 9,8Kavram kanıtıEPSS %79

    openbsd · openssh20 Tem 2023

  • CVE-2024-6387
    62Bu hafta

    Openssh: regresshion - race condition in ssh allows rce/dos

    YüksekCVSS 8,1Kavram kanıtıEPSS %99

    sonicwall · sma 6200 firmware1 Tem 2024

  • CVE-2003-0466
    62Bu hafta

    Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code,

    KritikCVSS 9,8Kavram kanıtıEPSS %78

    redhat · wu ftpd27 Ağu 2003

  • CVE-2018-15473
    60Bu hafta

    OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after

    OrtaCVSS 5,3SilahlaştırılmışEPSS %98

    openbsd · openssh17 Ağu 2018

  • CVE-2016-6210
    60Bu hafta

    sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used for user password hashing, uses BLOWFISH hashing on a static password when the us

    OrtaCVSS 5,9SilahlaştırılmışEPSS %88

    openbsd · openssh13 Şub 2017

  • CVE-2008-5161
    60Bu hafta

    Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through

    DüşükCVSS 3,7SilahlaştırılmışEPSS %18

    ssh · tectia client19 Kas 2008

  • CVE-2002-0391
    56Planlayın

    Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including di

    KritikCVSS 9,8İstismar yokEPSS %58

    sun · solaris12 Ağu 2002

  • CVE-2023-25136
    53Planlayın

    OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling.

    OrtaCVSS 6,5Kavram kanıtıEPSS %89

    openbsd · openssh3 Şub 2023

  • CVE-2007-5365
    52Planlayın

    Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementati

    YüksekCVSS 7,2Kavram kanıtıEPSS %80

    openbsd · openbsd11 Eki 2007

  • CVE-2001-0554
    52Planlayın

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    mit · kerberos14 Ağu 2001

  • CVE-2023-48795
    51Planlayın

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    OrtaCVSS 5,9Kavram kanıtıEPSS %93

    ssh · ssh18 Ara 2023

  • CVE-2004-0492
    50Planlayın

    Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (pr

    KritikCVSS 10,0İstismar yokEPSS %33

    apache · http server6 Ağu 2004

  • CVE-2001-0144
    50Planlayın

    CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an in

    KritikCVSS 10,0Kavram kanıtıEPSS %32

    ssh · ssh12 Mar 2001

  • CVE-2016-6515
    48Planlayın

    The auth_password function in auth-passwd.c in sshd in OpenSSH before 7.3 does not limit password lengths for password authentication, which

    YüksekCVSS 7,5Kavram kanıtıEPSS %58

    openbsd · openssh7 Ağu 2016

  • CVE-2002-0640
    48Planlayın

    Buffer overflow in sshd in OpenSSH 2.3.1 through 3.3 may allow remote attackers to execute arbitrary code via a large number of responses du

    KritikCVSS 10,0Kavram kanıtıEPSS %28

    openbsd · openssh3 Tem 2002

  • CVE-2004-0084
    47Planlayın

    Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remot

    KritikCVSS 10,0Kavram kanıtıEPSS %24

    xfree86 project · x11r63 Mar 2004

  • CVE-2006-5051
    46Planlayın

    Signal handler race condition in OpenSSH before 4.4 allows remote attackers to cause a denial of service (crash), and possibly execute arbit

    YüksekCVSS 8,1Kavram kanıtıEPSS %45

    openbsd · openssh27 Eyl 2006

  • CVE-2007-1365
    46Planlayın

    Buffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute arbitrary code via fragmented IPv6 packets du

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    openbsd · openbsd10 Mar 2007

  • CVE-2004-0083
    46Planlayın

    Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary

    KritikCVSS 10,0Kavram kanıtıEPSS %21

    xfree86 project · x11r63 Mar 2004

  • CVE-2001-0247
    46Planlayın

    Buffer overflows in BSD-based FTP servers allows remote attackers to execute arbitrary commands via a long pattern string containing a {} se

    KritikCVSS 10,0Kavram kanıtıEPSS %19

    mit · kerberos 518 Haz 2001

  • CVE-2005-0356
    45Planlayın

    Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attacke

    OrtaCVSS 5,0Kavram kanıtıEPSS %82

    cisco · agent desktop31 May 2005

  • CVE-2016-0777
    45Planlayın

    The resend_bytes function in roaming_common.c in the client in OpenSSH 5.x, 6.x, and 7.x before 7.1p2 allows remote servers to obtain sensit

    OrtaCVSS 6,5Kavram kanıtıEPSS %63

    sophos · unified threat management software14 Oca 2016

  • CVE-2001-0053
    45Planlayın

    One-byte buffer overflow in replydirname function in BSD-based ftpd allows remote attackers to gain root privileges.

    KritikCVSS 10,0Kavram kanıtıEPSS %17

    david madore · ftpd-bsd12 Şub 2001