Alpine/openssh: medium 5.9
The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connecti
Action: Upgrade openssh to 8.4_p1-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.7 | 8.4_p1-r0 | - |
Fixed versions
| 8.4_p1-r0 |
Sources
- osv: ALPINE-CVE-2020-14145#Alpine:v3.23/openssh
- https://security.alpinelinux.org/vuln/CVE-2020-14145
published · modified · JSON