The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - openssh: MaxAuthTries limit bypass via duplicates in KbdInteractiveDevices (CVE-2015-5600)

  - openssh: possible fallback from untrusted to trusted X11 forwarding (CVE-2016-1908)

  - The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP     connection and completing a login, which makes it easier for remote attackers to cause a denial of service     (connection-slot exhaustion) by periodically making many new TCP connections. (CVE-2010-5107)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

The default configuration of OpenSSH prior to 6.2 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.

The remote NewStart CGSL host, running version MAIN 4.05, has openssh-latest packages installed that are affected by multiple vulnerabilities:

  - scp in OpenSSH 4.2p1 allows attackers to execute     arbitrary commands via filenames that contain shell     metacharacters or spaces, which are expanded twice.
    (CVE-2006-0225)

  - sshd in OpenSSH before 4.4, when using the version 1 SSH     protocol, allows remote attackers to cause a denial of     service (CPU consumption) via an SSH packet that     contains duplicate blocks, which is not properly handled     by the CRC compensation attack detector. (CVE-2006-4924)

  - Signal handler race condition in OpenSSH before 4.4     allows remote attackers to cause a denial of service     (crash), and possibly execute arbitrary code if GSSAPI     authentication is enabled, via unspecified vectors that     lead to a double-free. (CVE-2006-5051)

  - Unspecified vulnerability in the sshd Privilege     Separation Monitor in OpenSSH before 4.5 causes weaker     verification that authentication has been successful,     which might allow attackers to bypass authentication.
    NOTE: as of 20061108, it is believed that this issue is     only exploitable by leveraging vulnerabilities in the     unprivileged process, which are not known to exist.
    (CVE-2006-5794)

  - Unspecified vulnerability in the     linux_audit_record_event function in OpenSSH 4.3p2, as     used on Fedora Core 6 and possibly other systems, allows     remote attackers to write arbitrary characters to an     audit log via a crafted username. NOTE: some of these     details are obtained from third party information.
    (CVE-2007-3102)

  - The (1) remote_glob function in sftp-glob.c and the (2)     process_put function in sftp.c in OpenSSH 5.8 and     earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2,     OpenBSD 4.7, and other products, allow remote     authenticated users to cause a denial of service (CPU     and memory consumption) via crafted glob expressions     that do not match any pathnames, as demonstrated by glob     expressions in SSH_FXP_STAT requests to an sftp daemon,     a different vulnerability than CVE-2010-2632.
    (CVE-2010-4755)

  - The default configuration of OpenSSH through 6.1     enforces a fixed time limit between establishing a TCP     connection and completing a login, which makes it easier     for remote attackers to cause a denial of service     (connection-slot exhaustion) by periodically making many     new TCP connections. (CVE-2010-5107)

  - It was found that OpenSSH did not properly handle     certain AcceptEnv parameter values with wildcard     characters. A remote attacker could use this flaw to     bypass intended environment variable restrictions.
    (CVE-2014-2532)

  - It was discovered that OpenSSH clients did not correctly     verify DNS SSHFP records. A malicious server could use     this flaw to force a connecting client to skip the DNS     SSHFP record check and require the user to perform     manual host verification of the DNS SSHFP record.
    (CVE-2014-2653)

  - It was found that when OpenSSH was used in a Kerberos     environment, remote authenticated users were allowed to     log in as a different user if they were listed in the     ~/.k5users file of that user, potentially bypassing     intended authentication restrictions. (CVE-2014-9278)

  - It was discovered that the OpenSSH sshd daemon did not     check the list of keyboard-interactive authentication     methods for duplicates. A remote attacker could use this     flaw to bypass the MaxAuthTries limit, making it easier     to perform password guessing attacks. (CVE-2015-5600)

  - It was discovered that the OpenSSH sshd daemon fetched     PAM environment settings before running the login     program. In configurations with UseLogin=yes and the     pam_env PAM module configured to read user environment     settings, a local user could use this flaw to execute     arbitrary code as root. (CVE-2015-8325)

  - An information leak flaw was found in the way the     OpenSSH client roaming feature was implemented. A     malicious server could potentially use this flaw to leak     portions of memory (possibly including private SSH keys)     of a successfully authenticated OpenSSH client.
    (CVE-2016-0777)

  - An access flaw was discovered in OpenSSH; the OpenSSH     client did not correctly handle failures to generate     authentication cookies for untrusted X11 forwarding. A     malicious or compromised remote X application could     possibly use this flaw to establish a trusted connection     to the local X server, even if only untrusted X11     forwarding was requested. (CVE-2016-1908)

  - A covert timing channel flaw was found in the way     OpenSSH handled authentication of non-existent users. A     remote unauthenticated attacker could possibly use this     flaw to determine valid user names by measuring the     timing of server responses. (CVE-2016-6210)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has openssh packages installed that are affected by multiple vulnerabilities:

  - scp in OpenSSH 4.2p1 allows attackers to execute     arbitrary commands via filenames that contain shell     metacharacters or spaces, which are expanded twice.
    (CVE-2006-0225)

  - sshd in OpenSSH before 4.4, when using the version 1 SSH     protocol, allows remote attackers to cause a denial of     service (CPU consumption) via an SSH packet that     contains duplicate blocks, which is not properly handled     by the CRC compensation attack detector. (CVE-2006-4924)

  - Signal handler race condition in OpenSSH before 4.4     allows remote attackers to cause a denial of service     (crash), and possibly execute arbitrary code if GSSAPI     authentication is enabled, via unspecified vectors that     lead to a double-free. (CVE-2006-5051)

  - Unspecified vulnerability in the sshd Privilege     Separation Monitor in OpenSSH before 4.5 causes weaker     verification that authentication has been successful,     which might allow attackers to bypass authentication.
    NOTE: as of 20061108, it is believed that this issue is     only exploitable by leveraging vulnerabilities in the     unprivileged process, which are not known to exist.
    (CVE-2006-5794)

  - Unspecified vulnerability in the     linux_audit_record_event function in OpenSSH 4.3p2, as     used on Fedora Core 6 and possibly other systems, allows     remote attackers to write arbitrary characters to an     audit log via a crafted username. NOTE: some of these     details are obtained from third party information.
    (CVE-2007-3102)

  - The (1) remote_glob function in sftp-glob.c and the (2)     process_put function in sftp.c in OpenSSH 5.8 and     earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2,     OpenBSD 4.7, and other products, allow remote     authenticated users to cause a denial of service (CPU     and memory consumption) via crafted glob expressions     that do not match any pathnames, as demonstrated by glob     expressions in SSH_FXP_STAT requests to an sftp daemon,     a different vulnerability than CVE-2010-2632.
    (CVE-2010-4755)

  - The default configuration of OpenSSH through 6.1     enforces a fixed time limit between establishing a TCP     connection and completing a login, which makes it easier     for remote attackers to cause a denial of service     (connection-slot exhaustion) by periodically making many     new TCP connections. (CVE-2010-5107)

  - It was found that OpenSSH did not properly handle     certain AcceptEnv parameter values with wildcard     characters. A remote attacker could use this flaw to     bypass intended environment variable restrictions.
    (CVE-2014-2532)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote OracleVM system is missing necessary patches to address critical security updates :

  - CVE-2015-5600: MaxAuthTries limit bypass via duplicates     in KbdInteractiveDevices (#1245969)

  - CVE-2016-3115: missing sanitisation of input for X11     forwarding (#1317816)

  - SSH2_MSG_DISCONNECT for user initiated disconnect follow     RFC 4253 (#1222500)

  - Add missing dot in ssh manual page (#1197763)

  - Fix minor problems found by covscan/gcc (#1196063)

  - Add missing options in man ssh (#1197763)

  - Add KbdInteractiveAuthentication documentation to man     sshd_config (#1109251)

  - Correct freeing newkeys structure when privileged     monitor exits (#1208584)

  - Fix problems with failing persistent connections     (#1131585)

  - Fix memory leaks in auditing patch (#1208584)

  - Better approach to logging sftp commands in chroot

  - Make sshd -T write all config options and add missing     Cipher, MAC to man (#1109251)

  - Add missing ControlPersist option to man ssh (#1197763)

  - Add sftp option to force mode of created files     (#1191055)

  - Do not load RSA1 keys in FIPS mode (#1197072)

  - Add missing support for ECDSA in ssh-keyscan (#1196331)

  - Fix coverity/gcc issues (#1196063)

  - Backport wildcard functionality for PermitOpen in     sshd_config file (#1159055)

  - Ability to specify an arbitrary LDAP filter in ldap.conf     (#1119506)

  - Fix ControlPersist option with ProxyCommand (#1160487)

  - Backport fix of ssh-keygen with error : gethostname:
    File name too long (#1161454)

  - Backport show remote address instead of UNKNOWN after     timeout at password prompt (#1161449)

  - Fix printing of extensions in v01 certificates     (#1093869)

  - Fix confusing audit trail for unsuccessful logins     (#1127312)

  - Don't close fds for internal sftp sessions (#1085710)

  - Fix config parsing quotes (backport) (#1134938)

  - Enable logging in chroot into separate file (#1172224)

  - Fix auditing when using combination of ForcedCommand and     PTY (#1131585)

  - Fix ssh-copy-id on non-sh remote shells (#1135521)

  - ignore SIGXFSZ in postauth monitor child (#1133906)

  - don't try to generate DSA keys in the init script in     FIPS mode (#1118735)

  - ignore SIGPIPE in ssh-keyscan (#1108836)

  - ssh-add: fix fatal exit when removing card (#1042519)

  - fix race in backported ControlPersist patch (#953088)

  - skip requesting smartcard PIN when removing keys from     agent (#1042519)

  - add possibility to autocreate only RSA key into     initscript (#1111568)

  - fix several issues reported by coverity

  - x11 forwarding - be less restrictive when can't bind to     one of available addresses (#1027197)

  - better fork error detection in audit patch (#1028643)

  - fix openssh-5.3p1-x11.patch for non-linux platforms     (#1100913)

  - prevent a server from skipping SSHFP lookup (#1081338)     (CVE-2014-2653)

  - ignore environment variables with embedded '=' or '\0'     characters (CVE-2014-2532)

  - backport ControlPersist option (#953088)

  - log when a client requests an interactive session and     only sftp is allowed (#997377)

  - don't try to load RSA1 host key in FIPS mode (#1009959)

  - restore Linux oom_adj setting when handling SIGHUP to     maintain behaviour over restart (#1010429)

  - ssh-keygen -V - relative-specified certificate expiry     time should be relative to current time (#1022459)

  - adjust the key echange DH groups and ssh-keygen     according to SP800-131A (#993580)

  - log failed integrity test if /etc/system-fips exists     (#1020803)

  - backport ECDSA and ECDH support (#1028335)

  - use dracut-fips package to determine if a FIPS module is     installed (#1001565)

  - use dist tag in suffixes for hmac checksum files     (#1001565)

  - use hmac_suffix for ssh[,d] hmac checksums (#1001565)

  - fix NSS keys support (#1004763)

  - change default value of MaxStartups - CVE-2010-5107 -     #908707

  - add -fips subpackages that contains the FIPS module     files (#1001565)

  - don't use SSH_FP_MD5 for fingerprints in FIPS mode     (#998835)

  - do ssh_gssapi_krb5_storecreds twice - before and after     pam sesssion (#974096)

  - bump the minimum value of SSH_USE_STRONG_RNG to 14     according to SP800-131A (#993577)

  - fixed an issue with broken 'ssh -I pkcs11' (#908038)

  - abort non-subsystem sessions to forced internal     sftp-server (#993509)

  - reverted 'store krb5 credentials after a pam session is     created (#974096)'

  - Add support for certificate key types for users and     hosts (#906872)

  - Apply RFC3454 stringprep to banners when possible     (#955792)

  - fix chroot logging issue (#872169)

  - change the bad key permissions error message (#880575)

  - fix a race condition in ssh-agent (#896561)

  - backport support for PKCS11 from openssh-5.4p1 (#908038)

  - add a KexAlgorithms knob to the client and server     configuration (#951704)

  - fix parsing logic of ldap.conf file (#954094)

  - Add HMAC-SHA2 algorithm support (#969565)

  - store krb5 credentials after a pam session is created     (#974096)

The remote OracleVM system is missing necessary patches to address critical security updates :

  - change default value of MaxStartups - CVE-2010-5107     (John Haxby)

The remote OracleVM system is missing necessary patches to address critical security updates :

  - change default value of MaxStartups - CVE-2010-5107     (John Haxby) 

  - improve RNG seeding from /dev/random (#681291,#708056)

  - make ssh(1)'s ConnectTimeout option apply to both the     TCP connection and SSH banner exchange (#750725)

  - use IPV6_V6ONLY for sshd inet6 listening socket     (#640857)

  - add LANGUAGE to the sent/accepted evvironment (#710229)

  - ssh-copy-id copies now id_rsa.pub by default (#731930)

  - repairs man pages (#731925)

  - set cloexec on accept socket (#642935)

  - add umask to sftp (#720598)

  - enable lastolg for big uids (#706315)

  - enable selinux domain transition to passwd_t (#689406)

  - enable pubkey auth in the fips mode (#674747)

  - improve resseding the prng from /dev/urandom or     /dev/random respectively (#681291)

  - periodically ressed the prng from /dev/urandom or     /dev/random respectively (#681291)

  - change cipher preferences (#661716)

  - change cipher preferences (#661716)

  - enable to run sshd as non root user (#661669)

  - reenable rekeying (#659242)

  - add nss keys to key audit patch (#632402)

  - key audit patch (#632402)

  - supply forced command documentation (#532559)

  - compile in the OpenSSL engine support

  - record lastlog with big uid (#616396)

  - add OpenSSL engine support (#594815)

  - backport forced command directive (#532559)

  - stderr does not more disturb sftp (#576765)

The remote Oracle Linux 5 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-3521 advisory.

    [4.3p2-82.0.1]
    - change default value of MaxStartups - CVE-2010-5107 (John Haxby) [orabug 22766491]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections. (CVE-2010-5107)

The remote Solaris system is missing necessary patches to address security updates :

  - The default configuration of OpenSSH through 6.1     enforces a fixed time limit between establishing a TCP     connection and completing a login, which makes it easier     for remote attackers to cause a denial of service     (connection-slot exhaustion) by periodically making many     new TCP connections. (CVE-2010-5107)

  - The auth_parse_options function in auth-options.c in     sshd in OpenSSH before 5.7 provides debug messages     containing authorized_keys command options, which allows     remote authenticated users to obtain potentially     sensitive information by reading these messages, as     demonstrated by the shared user account required by     Gitolite. NOTE: this can cross privilege boundaries     because a user account may intentionally have no shell     or filesystem access, and therefore may have no     supported way to read an authorized_keys file in its own     home directory. (CVE-2012-0814)

Updated openssh packages that fix one security issue, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

OpenSSH is OpenBSD's Secure Shell (SSH) protocol implementation. These packages include the core files necessary for the OpenSSH client and server.

The default OpenSSH configuration made it easy for remote attackers to exhaust unauthorized connection slots and prevent other users from being able to log in to a system. This flaw has been addressed by enabling random early connection drops by setting MaxStartups to 10:30:100 by default. For more information, refer to the sshd_config(5) man page. (CVE-2010-5107)

These updated openssh packages include numerous bug fixes and enhancements. Space precludes documenting all of these changes in this advisory. Users are directed to the Red Hat Enterprise Linux 6.5 Technical Notes, linked to in the References, for information on the most significant of these changes.

All openssh users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2013:1527 advisory.

    The rhev-hypervisor6 package provides a Red Hat Enterprise Virtualization     Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor     is a dedicated Kernel-based Virtual Machine (KVM) hypervisor. It includes     everything necessary to run and manage virtual machines: a subset of the     Red Hat Enterprise Linux operating environment and the Red Hat Enterprise     Virtualization Agent.

    Note: Red Hat Enterprise Virtualization Hypervisor is only available for     the Intel 64 and AMD64 architectures with virtualization extensions.

    Upgrade Note: If you upgrade the Red Hat Enterprise Virtualization     Hypervisor through the 3.2 Manager administration portal, the Host may     appear with the status of Install Failed. If this happens, place the host     into maintenance mode, then activate it again to get the host back to an     Up state.

    A buffer overflow flaw was found in the way QEMU processed the SCSI REPORT     LUNS command when more than 256 LUNs were specified for a single SCSI     target. A privileged guest user could use this flaw to corrupt QEMU process     memory on the host, which could potentially result in arbitrary code     execution on the host with the privileges of the QEMU process.
    (CVE-2013-4344)

    Multiple flaws were found in the way Linux kernel handled HID (Human     Interface Device) reports. An attacker with physical access to the system     could use this flaw to crash the system or, potentially, escalate their     privileges on the system. (CVE-2013-2888, CVE-2013-2889, CVE-2013-2892)

    A flaw was found in the way the Python SSL module handled X.509 certificate     fields that contain a NULL byte. An attacker could potentially exploit this     flaw to conduct man-in-the-middle attacks to spoof SSL servers. Note that     to exploit this issue, an attacker would need to obtain a carefully crafted     certificate signed by an authority that the client trusts. (CVE-2013-4238)

    The default OpenSSH configuration made it easy for remote attackers to     exhaust unauthorized connection slots and prevent other users from being     able to log in to a system. This flaw has been addressed by enabling random     early connection drops by setting MaxStartups to 10:30:100 by default.
    For more information, refer to the sshd_config(5) man page. (CVE-2010-5107)

    The CVE-2013-4344 issue was discovered by Asias He of Red Hat.

    This updated package provides updated components that include fixes for     various security issues. These issues have no security impact on Red Hat     Enterprise Virtualization Hypervisor itself, however. The security fixes     included in this update address the following CVE numbers:

    CVE-2012-0786 and CVE-2012-0787 (augeas issues)

    CVE-2013-1813 (busybox issue)

    CVE-2013-0221, CVE-2013-0222, and CVE-2013-0223 (coreutils issues)

    CVE-2012-4453 (dracut issue)

    CVE-2013-4332, CVE-2013-0242, and CVE-2013-1914 (glibc issues)

    CVE-2013-4387, CVE-2013-0343, CVE-2013-4345, CVE-2013-4591, CVE-2013-4592,     CVE-2012-6542, CVE-2013-3231, CVE-2013-1929, CVE-2012-6545, CVE-2013-1928,     CVE-2013-2164, CVE-2013-2234, and CVE-2013-2851 (kernel issues)

    CVE-2013-4242 (libgcrypt issue)

    CVE-2013-4419 (libguestfs issue)

    CVE-2013-1775, CVE-2013-2776, and CVE-2013-2777 (sudo issues)

    This update also fixes the following bug:

    * A previous version of the rhev-hypervisor6 package did not contain the     latest vhostmd package, which provides a metrics communication channel     between a host and its hosted virtual machines, allowing limited     introspection of host resource usage from within virtual machines. This has     been fixed, and rhev-hypervisor6 now includes the latest vhostmd package.
    (BZ#1026703)

    This update also contains the fixes from the following errata:

    * ovirt-node: https://rhn.redhat.com/errata/RHBA-2013-1528.html

    Users of the Red Hat Enterprise Virtualization Hypervisor are advised to     upgrade to this updated package, which corrects these issues.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201405-06 (OpenSSH: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in OpenSSH. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could execute arbitrary code, cause a Denial of       Service condition, obtain sensitive information, or bypass environment       restrictions.
  Workaround :

    There is no known workaround at this time.

The version of OpenSSH running on the remote host is affected by a denial of service vulnerability. The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections.

The default OpenSSH configuration made it easy for remote attackers to exhaust unauthorized connection slots and prevent other users from being able to log in to a system. This flaw has been addressed by enabling random early connection drops by setting MaxStartups to 10:30:100 by default. For more information, refer to the sshd_config(5) man page. (CVE-2010-5107)

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2013-1591 advisory.

    - change default value of MaxStartups - CVE-2010-5107 - #908707

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for OpenSSH provides the following fixes :

  - Implement remote denial of service hardening.
    (bnc#802639, CVE-2010-5107)

  - Use only FIPS 140-2 approved algorithms when FIPS mode     is detected. (bnc#755505, bnc#821039)

  - Do not link OpenSSH binaries with LDAP libraries.
    (bnc#826906)

According to its banner, a version of OpenSSH earlier than version 6.2 is listening on this port.  The default configuration of OpenSSH installs before 6.2 could allow a remote attacker to bypass the LoginGraceTime and MaxStartups thresholds by periodically making a large number of new TCP connections and thereby prevent legitimate users from gaining access to the service. 

Note that this plugin has not tried to exploit the issue or detect whether the remote service uses a vulnerable configuration.  Instead, it has simply checked the version of OpenSSH running on the remote host.

A vulnerability has been found and corrected in openssh :

The default configuration of OpenSSH through 6.1 enforces a fixed time limit between establishing a TCP connection and completing a login, which makes it easier for remote attackers to cause a denial of service (connection-slot exhaustion) by periodically making many new TCP connections (CVE-2010-5107).

The updated packages have been patched to correct thies issue.

This update changes default of MaxStartups to 10:30:100 to start doing random early drop at 10 connections up to 100 connections - CVE-2010-5107

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198928	RHEL 5 : openssh (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
701164	OpenSSH < 6.2 DoS	Nessus Network Monitor	SSH	medium
127415	NewStart CGSL MAIN 4.05 : openssh-latest Multiple Vulnerabilities (NS-SA-2019-0146)	Nessus	NewStart CGSL Local Security Checks	critical
127206	NewStart CGSL CORE 5.04 / MAIN 5.04 : openssh Multiple Vulnerabilities (NS-SA-2019-0036)	Nessus	NewStart CGSL Local Security Checks	high
90076	OracleVM 3.3 / 3.4 : openssh (OVMSA-2016-0038)	Nessus	OracleVM Local Security Checks	medium
89817	OracleVM 2.2 : openssh (OVMSA-2016-0033)	Nessus	OracleVM Local Security Checks	medium
89020	OracleVM 3.2 : openssh (OVMSA-2016-0030)	Nessus	OracleVM Local Security Checks	medium
88981	Oracle Linux 5 : openssh (ELSA-2016-3521)	Nessus	Oracle Linux Local Security Checks	high
84450	F5 Networks BIG-IP : OpenSSH vulnerability (K14741)	Nessus	F5 Networks Local Security Checks	medium
80775	Oracle Solaris Third-Party Patch Update : ssh (cve_2010_5107_denial_of)	Nessus	Solaris Local Security Checks	medium
79164	CentOS 6 : openssh (CESA-2013:1591)	Nessus	CentOS Local Security Checks	medium
78979	RHEL 6 : rhev-hypervisor6 (RHSA-2013:1527)	Nessus	Red Hat Local Security Checks	high
73958	GLSA-201405-06 : OpenSSH: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	medium
73558	AIX OpenSSH Advisory : openssh_advisory2.asc	Nessus	AIX Local Security Checks	medium
71196	Scientific Linux Security Update : openssh on SL6.x i386/x86_64 (20131121)	Nessus	Scientific Linux Local Security Checks	medium
71129	Oracle Linux 6 : openssh (ELSA-2013-1591)	Nessus	Oracle Linux Local Security Checks	high
71007	RHEL 6 : openssh (RHSA-2013:1591)	Nessus	Red Hat Local Security Checks	medium
69375	SuSE 11.2 Security Update : OpenSSH (SAT Patch Number 8078)	Nessus	SuSE Local Security Checks	medium
67140	OpenSSH LoginGraceTime / MaxStartups DoS	Nessus	Denial of Service	medium
66065	Mandriva Linux Security Advisory : openssh (MDVSA-2013:051)	Nessus	Mandriva Local Security Checks	medium
64883	Fedora 17 : openssh-5.9p1-29.fc17 (2013-2206)	Nessus	Fedora Local Security Checks	medium
64604	Fedora 18 : openssh-6.1p1-5.fc18 (2013-2212)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2010-5107

high

Tenable Plugins

critical

medium

critical

high

medium

medium

medium

high

medium

medium

medium

high

medium

medium

medium

high

medium

medium

medium

medium

medium

medium