Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2019-6110 →

DEBIAN-CVE-2019-6110

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipu...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for example to use ANSI control codes to hide additional files being transferred.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 openssh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 openssh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 openssh

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org