Sshd vulnerabilities

1 known vulnerability in Sshd from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache MINA SSHD: Deserialization of Untrusted Data

  CVE-2022-45047Nov 16, 2022ApacheEPSS 4.73%

  Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD