Not analysed yet
We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.
Severity and exploitation
| Score | Rating | CVSS | Vector | Source |
|---|---|---|---|---|
| 3.7 | Low | 3.1 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N | ADP (CISA-ADP) |
- CISA KEV Not listed.
- EPSS 0.19, the 97th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.
Timeline
Sources
References from the CNA
- openssh.org/txt/cbc.adv
- sunsolve.sun.com/search/document.do?assetkey=1-66-247186-1
- www.securityfocus.com/bid/32319
- secunia.com/advisories/33121
- h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05157667
- osvdb.org/49872
- secunia.com/advisories/33308
- rhn.redhat.com/errata/RHSA-2009-1287.html
- www.cpni.gov.uk/Docs/Vulnerability_Advisory_SSH.txt
- www.securitytracker.com/id?1021382
- kc.mcafee.com/corporate/index?page=content&id=SB10163
- osvdb.org/50036
- secunia.com/advisories/32833
- secunia.com/advisories/36558
- osvdb.org/50035
- www.ssh.com/company/news/article/953/
- www.securitytracker.com/id?1021235
- secunia.com/advisories/34857
- support.avaya.com/elmodocs2/security/ASA-2008-503.htm
- support.attachmate.com/techdocs/2398.html
- www.rtpro.yamaha.co.jp/RT/FAQ/Security/CPNI957037.html
- www.vupen.com/english/advisories/2008/3173
- www.securityfocus.com/archive/1/498579/100/0/threaded
- exchange.xforce.ibmcloud.com/vulnerabilities/46620
- secunia.com/advisories/32740
- www.vupen.com/english/advisories/2009/1135
- secunia.com/advisories/32760
- www.vupen.com/english/advisories/2009/3184
- kb.juniper.net/InfoCenter/index?page=content&id=JSA10705
- www.securitytracker.com/id?1021236