OpenSSH could be made to bypass the server identity check.
Comment
Archive for February 18th, 2025
5 results.
Libtasn1 could be made to crash if it received specially crafted network traffic.
Atril could be made to crash or run programs as your login if it opened a specially crafted file.
Several security issues were fixed in OpenSSH.
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enabled (disabled by default).