VDB
ALSA-2024%3A3166
ALSA-2024%3A3166
PUBLISHED
Moderate: openssh security update
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| AlmaLinux:8 | openssh-clients | 0, 0 |
| AlmaLinux:8 | pam_ssh_agent_auth | 0, 0 |
| AlmaLinux:8 | openssh-keycat | 0, 0 |
| AlmaLinux:8 | openssh-askpass | 0, 0 |
| AlmaLinux:8 | openssh-server | 0, 0 |
| AlmaLinux:8 | openssh-cavs | 0, 0 |
| AlmaLinux:8 | openssh-ldap | 0, 0 |
| AlmaLinux:8 | openssh | 0, 0 |
Exploit Intelligence
- Exploit for CVE-2020-15778(OpenSSH vul) (github-poc-repo)
- Exploit for CVE-2020-15778(OpenSSH vul) (github-poc-repo)
- cpandya2909/CVE-2020-15778 (github-poc-repo)
- cpandya2909/CVE-2020-15778 (github-poc-repo)
- yifanzhg/CVE-2020-15778 (github-poc-repo)
- yifanzhg/CVE-2020-15778 (github-poc-repo)
- This script is a safe and simple tool that helps system users, students, and administrators check if their SCP (Secure Copy) client is vulnerable to CVE-2020-15778, a command injection vulnerability in OpenSSH SCP (versions ≤ 8.3p1). (github-poc-repo)
- This script is a safe and simple tool that helps system users, students, and administrators check if their SCP (Secure Copy) client is vulnerable to CVE-2020-15778, a command injection vulnerability in OpenSSH SCP (versions ≤ 8.3p1). (github-poc-repo)
- This script is a safe and simple tool that helps system users, students, and administrators check if their SCP (Secure Copy) client is vulnerable to CVE-2020-15778, a command injection vulnerability in OpenSSH SCP (versions ≤ 8.3p1). (github-poc)
- This script is a safe and simple tool that helps system users, students, and administrators check if their SCP (Secure Copy) client is vulnerable to CVE-2020-15778, a command injection vulnerability in OpenSSH SCP (versions ≤ 8.3p1). (github-poc)
…and 12 more exploits
Timeline
- May 22, 2024 CVE Published
- May 29, 2024 CVE Updated
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Distribution Patch
- Mar 6, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2024:3166 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2020-15778 third-party-advisory
- https://bugzilla.redhat.com/1860487 third-party-advisory
- https://errata.almalinux.org/8/ALSA-2024-3166.html vendor-advisory