Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Nov 16, 2022 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Nov 16, 2022 |
| Redhat Openshift | — | Upgrade jenkins-2-plugins | Feb 9, 2023 | Nov 16, 2022 |
| Suse | — | Upgrade apache-parentUpgrade apache-sshdUpgrade apache-sshd-javadoc | Aug 9, 2024 | Nov 16, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub