CVE-2014-2653

The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.

Affected products

Alt Linux, Centos, Hp-Ux, Ibm Aix, Openssh, Red Hat, Suse

Openbsd Openssh

≤ 6.6, 6.0, 6.1, 6.2, 6.3, 6.4, 6.5

Fix

Available

CVSS 3.1

6.5 MEDIUM

EPSS

2.0% (79th percentile)

Weakness

CWE-20

NVD status

Modified

Published

2014-03-27

No exploit for CVE-2014-2653 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.