NVD

Id
31040  
Name
CVE-2014-2653  
Description
The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-03-27  
Modified Date
2017-01-06  
Seq
2014-2653  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
163067 31040 CVE-2014-2653 http://advisories.mageia.org/MGASA-2014-0166.html  View
163068 31040 CVE-2014-2653 http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc  View
163069 31040 CVE-2014-2653 FEDORA-2014-6569  View
163070 31040 CVE-2014-2653 FEDORA-2014-6380  View
163071 31040 CVE-2014-2653 SSRT101487  View
163072 31040 CVE-2014-2653 [oss-security] 20140326 CVE request: openssh client does not check SSHFP if server offers certificate  View
163073 31040 CVE-2014-2653 RHSA-2014:1552  View
163074 31040 CVE-2014-2653 RHSA-2015:0425  View
163075 31040 CVE-2014-2653 59855  View
163076 31040 CVE-2014-2653 DSA-2894  View
163077 31040 CVE-2014-2653 MDVSA-2014:068  View
163078 31040 CVE-2014-2653 MDVSA-2015:095  View
163079 31040 CVE-2014-2653 http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html  View
163080 31040 CVE-2014-2653 66459  View
163081 31040 CVE-2014-2653 USN-2164-1  View
163082 31040 CVE-2014-2653 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12945 JVNDB-2014-001820 OpenSSH のクライアントにおける SSHFP DNS RR チェックのスキップを誘発される脆弱性 OpenSSH のクライアントの sshconnect.c 内の verify_host_key 関数には、SSHFP DNS RR チェックのスキップを誘発される脆弱性が存在します。 CVE-2014-2653 69940 CVE-2014-2653 31040 5.8 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001820.html 2014-03-25 2015-10-30 View