Fluid Attacks Database

Description

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 11	openssh	=1:8.4p1-5 \|\| =1:8.4p1-5+deb11u1 \|\| =1:8.4p1-5+deb11u2 \|\| =1:8.4p1-5+deb11u3 \|\| =1:8.4p1-5+deb11u4 \|\| =1:8.4p1-5+deb11u5 \|\| =1:8.4p1-5+deb11u6 \|\| >=0 <1:8.4p1-5+deb11u7	1:8.4p1-5+deb11u7
debian 12	openssh	=1:9.2p1-2 \|\| =1:9.2p1-2+deb12u1 \|\| =1:9.2p1-2+deb12u2 \|\| =1:9.2p1-2+deb12u3 \|\| =1:9.2p1-2+deb12u4 \|\| =1:9.2p1-2+deb12u5 \|\| =1:9.2p1-2+deb12u6 \|\| =1:9.2p1-2+deb12u7 \|\| >=0 <1:9.2p1-2+deb12u8	1:9.2p1-2+deb12u8
debian 13	openssh	=1:10.0p1-7 \|\| >=0 <1:10.0p1-7+deb13u1	1:10.0p1-7+deb13u1
debian 14	openssh	=1:10.0p1-7 \|\| =1:10.0p1-8 \|\| >=0 <1:10.1p1-1	1:10.1p1-1
alpine v3.23	openssh	>=0 <10.1_p1-r0	10.1_p1-r0
alpine v3.22	openssh	>=0 <10.0_p1-r10	10.0_p1-r10
rpm rhel10	openssh	<0:9.9p1-12.el10_1	0:9.9p1-12.el10_1
rpm rhel10.0	openssh	<0:9.9p1-7.el10_0.1	0:9.9p1-7.el10_0.1
rpm rhel9.4	openssh	<0:8.7p1-38.el9_4.6	0:8.7p1-38.el9_4.6
rpm rhel9	openssh	<0:8.7p1-47.el9_7	0:8.7p1-47.el9_7

1-10 of 15

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.