OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mmanswerauthpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges.
{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:8.9p1-3ubuntu0.13"
},
{
"binary_name": "openssh-server",
"binary_version": "1:8.9p1-3ubuntu0.13"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:8.9p1-3ubuntu0.13"
},
{
"binary_name": "openssh-tests",
"binary_version": "1:8.9p1-3ubuntu0.13"
},
{
"binary_name": "ssh",
"binary_version": "1:8.9p1-3ubuntu0.13"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:8.9p1-3ubuntu0.13"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:6.6p1-2ubuntu2.13+esm2"
},
{
"binary_name": "openssh-server",
"binary_version": "1:6.6p1-2ubuntu2.13+esm2"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:6.6p1-2ubuntu2.13+esm2"
},
{
"binary_name": "ssh",
"binary_version": "1:6.6p1-2ubuntu2.13+esm2"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:6.6p1-2ubuntu2.13+esm2"
},
{
"binary_name": "ssh-krb5",
"binary_version": "1:6.6p1-2ubuntu2.13+esm2"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:7.2p2-4ubuntu2.10+esm7"
},
{
"binary_name": "openssh-client-ssh1",
"binary_version": "1:7.2p2-4ubuntu2.10+esm7"
},
{
"binary_name": "openssh-server",
"binary_version": "1:7.2p2-4ubuntu2.10+esm7"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:7.2p2-4ubuntu2.10+esm7"
},
{
"binary_name": "ssh",
"binary_version": "1:7.2p2-4ubuntu2.10+esm7"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:7.2p2-4ubuntu2.10+esm7"
},
{
"binary_name": "ssh-krb5",
"binary_version": "1:7.2p2-4ubuntu2.10+esm7"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:7.6p1-4ubuntu0.7+esm4"
},
{
"binary_name": "openssh-server",
"binary_version": "1:7.6p1-4ubuntu0.7+esm4"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:7.6p1-4ubuntu0.7+esm4"
},
{
"binary_name": "ssh",
"binary_version": "1:7.6p1-4ubuntu0.7+esm4"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:7.6p1-4ubuntu0.7+esm4"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:8.2p1-4ubuntu0.13"
},
{
"binary_name": "openssh-server",
"binary_version": "1:8.2p1-4ubuntu0.13"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:8.2p1-4ubuntu0.13"
},
{
"binary_name": "openssh-tests",
"binary_version": "1:8.2p1-4ubuntu0.13"
},
{
"binary_name": "ssh",
"binary_version": "1:8.2p1-4ubuntu0.13"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:8.2p1-4ubuntu0.13"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
},
{
"binary_name": "openssh-client-hmac",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
},
{
"binary_name": "openssh-server",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
},
{
"binary_name": "openssh-server-hmac",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
},
{
"binary_name": "openssh-tests",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
},
{
"binary_name": "ssh",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.10"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.13"
},
{
"binary_name": "openssh-server",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.13"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.13"
},
{
"binary_name": "openssh-tests",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.13"
},
{
"binary_name": "ssh",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.13"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.13"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
},
{
"binary_name": "openssh-client-hmac",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
},
{
"binary_name": "openssh-client-ssh1",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
},
{
"binary_name": "openssh-server",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
},
{
"binary_name": "openssh-server-hmac",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
},
{
"binary_name": "ssh",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
},
{
"binary_name": "ssh-krb5",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.7"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
},
{
"binary_name": "openssh-client-hmac",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
},
{
"binary_name": "openssh-client-ssh1",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
},
{
"binary_name": "openssh-server",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
},
{
"binary_name": "openssh-server-hmac",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
},
{
"binary_name": "ssh",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
},
{
"binary_name": "ssh-krb5",
"binary_version": "1:7.2p2-4ubuntu2.fips.2.10.1"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
},
{
"binary_name": "openssh-client-hmac",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
},
{
"binary_name": "openssh-server",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
},
{
"binary_name": "openssh-server-hmac",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
},
{
"binary_name": "openssh-tests",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
},
{
"binary_name": "ssh",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:7.9p1-10~ubuntu18.04.fips.0.2"
}
]
}{
"binaries": [
{
"binary_name": "openssh-client",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
},
{
"binary_name": "openssh-server",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
},
{
"binary_name": "openssh-sftp-server",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
},
{
"binary_name": "openssh-tests",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
},
{
"binary_name": "ssh",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
},
{
"binary_name": "ssh-askpass-gnome",
"binary_version": "1:8.2p1-4ubuntu0.fips.0.2.1"
}
]
}