The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-openssh-askpass | May 4, 2022 | Jun 29, 2020 | |
| Alpine Linux | alpine-linux-upgrade-openssh | Mar 26, 2024 | Jun 29, 2020 | |
| Centos_linux | — | centos-upgrade-opensshcentos-upgrade-openssh-askpasscentos-upgrade-openssh-askpass-debuginfocentos-upgrade-openssh-cavscentos-upgrade-openssh-cavs-debuginfocentos-upgrade-openssh-clientscentos-upgrade-openssh-clients-debuginfocentos-upgrade-openssh-debuginfocentos-upgrade-openssh-debugsourcecentos-upgrade-openssh-keycatcentos-upgrade-openssh-keycat-debuginfocentos-upgrade-openssh-ldapcentos-upgrade-openssh-ldap-debuginfocentos-upgrade-openssh-servercentos-upgrade-openssh-server-debuginfocentos-upgrade-pam_ssh_agent_authcentos-upgrade-pam_ssh_agent_auth-debuginfo | Nov 10, 2021 | Jun 29, 2020 |
| Debian | no-fix-debian-deb-package | May 15, 2025 | Jun 29, 2020 | |
| F5 Big Ip | f5-bigip-upgrade-latest | Jun 17, 2026 | Oct 13, 2020 | |
| Gentoo Linux | gentoo-linux-upgrade-net-misc-openssh | May 28, 2021 | Jun 29, 2020 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-opensshhuawei-euleros-2_0_sp5-upgrade-openssh-askpasshuawei-euleros-2_0_sp5-upgrade-openssh-clientshuawei-euleros-2_0_sp5-upgrade-openssh-keycathuawei-euleros-2_0_sp5-upgrade-openssh-server | Mar 24, 2021 | Jun 29, 2020 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-opensshhuawei-euleros-2_0_sp8-upgrade-openssh-askpasshuawei-euleros-2_0_sp8-upgrade-openssh-cavshuawei-euleros-2_0_sp8-upgrade-openssh-clientshuawei-euleros-2_0_sp8-upgrade-openssh-keycathuawei-euleros-2_0_sp8-upgrade-openssh-ldaphuawei-euleros-2_0_sp8-upgrade-openssh-server | Feb 2, 2021 | Jun 29, 2020 | |
| Huawei Euleros 2_0_sp9 | huawei-euleros-2_0_sp9-upgrade-opensshhuawei-euleros-2_0_sp9-upgrade-openssh-clientshuawei-euleros-2_0_sp9-upgrade-openssh-server | Feb 8, 2021 | Jun 29, 2020 | |
| Openbsd Openssh | openbsd-openssh-upgrade-latest | Jul 8, 2020 | Jun 29, 2020 | |
| Oracle_linux | — | oracle-linux-upgrade-opensshoracle-linux-upgrade-openssh-askpassoracle-linux-upgrade-openssh-cavsoracle-linux-upgrade-openssh-clientsoracle-linux-upgrade-openssh-keycatoracle-linux-upgrade-openssh-ldaporacle-linux-upgrade-openssh-serveroracle-linux-upgrade-pam-ssh-agent-auth | Nov 17, 2021 | Jun 29, 2020 |
| Redhat_linux | redhat-upgrade-opensshredhat-upgrade-openssh-askpassredhat-upgrade-openssh-askpass-debuginforedhat-upgrade-openssh-cavsredhat-upgrade-openssh-cavs-debuginforedhat-upgrade-openssh-clientsredhat-upgrade-openssh-clients-debuginforedhat-upgrade-openssh-debuginforedhat-upgrade-openssh-debugsourceredhat-upgrade-openssh-keycatredhat-upgrade-openssh-keycat-debuginforedhat-upgrade-openssh-ldapredhat-upgrade-openssh-ldap-debuginforedhat-upgrade-openssh-serverredhat-upgrade-openssh-server-debuginforedhat-upgrade-pam_ssh_agent_authredhat-upgrade-pam_ssh_agent_auth-debuginfo | Nov 10, 2021 | Jun 29, 2020 | |
| Rocky_linux | rocky-upgrade-opensshrocky-upgrade-openssh-askpassrocky-upgrade-openssh-askpass-debuginforocky-upgrade-openssh-cavsrocky-upgrade-openssh-cavs-debuginforocky-upgrade-openssh-clientsrocky-upgrade-openssh-clients-debuginforocky-upgrade-openssh-debuginforocky-upgrade-openssh-debugsourcerocky-upgrade-openssh-keycatrocky-upgrade-openssh-keycat-debuginforocky-upgrade-openssh-ldaprocky-upgrade-openssh-ldap-debuginforocky-upgrade-openssh-serverrocky-upgrade-openssh-server-debuginforocky-upgrade-pam_ssh_agent_authrocky-upgrade-pam_ssh_agent_auth-debuginfo | Mar 12, 2024 | Jun 29, 2020 | |
| Suse | — | suse-upgrade-opensshsuse-upgrade-openssh-askpass-gnomesuse-upgrade-openssh-cavssuse-upgrade-openssh-fipssuse-upgrade-openssh-helpers | Dec 15, 2020 | Jun 29, 2020 |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Jun 29, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub