CVE-2008-1657: openbsd openssh

EPSS trend

Probability

2.21%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.21% on 20-09-2026

20-09-202620-10-2026

EPSS score

2.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

32 links

www.securityfocus.com/bid/28531VDB EntryX Refsource BIDPatch
support.attachmate.com/techdocs/2374.htmlX Refsource CONFIRM
www.ubuntu.com/usn/usn-649-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/32110Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-2419X Refsource CONFIRM
lists.apple.com/archives/security-announce//2008/Sep/msg00005.htmlVendor AdvisoryX Refsource APPLE
secunia.com/advisories/29609Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/31531Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.openbsd.org/errata43.htmlVendor AdvisoryX Refsource OPENBSDPatch
aix.software.ibm.com/aix/efixes/security/ssh_advisory.ascX Refsource CONFIRM

Show all 32 references

www.us-cert.gov/cas/techalerts/TA08-260A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
www.openssh.com/txt/release-4.9X Refsource CONFIRMVendor Advisory
www.securitytracker.com/id?1019733VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2008/1624/referencesVDB EntryX Refsource VUPENVendor Advisory
www.vupen.com/english/advisories/2008/2584VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/29735Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/29683Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/30361Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/31882Third Party AdvisoryX Refsource SECUNIAVendor Advisory
lists.opensuse.org/opensuse-security-announce/2008-04/msg00007.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/32080Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/2396VDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/29939Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2008/1035/referencesVDB EntryX Refsource VUPENVendor Advisory
secunia.com/advisories/29602Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/490488/100/0/threadedMailing ListX Refsource BUGTRAQ
wiki.rpath.com/wiki/Advisories:rPSA-2008-0139X Refsource CONFIRM
secunia.com/advisories/29693Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:098Vendor AdvisoryX Refsource MANDRIVA
www.gentoo.org/security/en/glsa/glsa-200804-03.xmlVendor AdvisoryX Refsource GENTOO
exchange.xforce.ibmcloud.com/vulnerabilities/41549VDB EntryX Refsource XF
security-tracker.debian.org/tracker/CVE-2008-1657Advisory

Related vulnerabilities

CVE-2018-15919debianopenssh+83.56%8y ago28-08-2018 08:00Remotely observable behaviour in auth-gss2.c in OpenSSH through 7.8 could be used by remote attackers to detect existence of users on a target system when GSS2 is in use. NOTE: the discoverer states 'We understand that the OpenSSH developers do not want to treat such a username enumeration (or "oracle") as a vulnerability.'CVE-2018-15473alpineopenssh+7598.63%8y ago17-08-2018 00:00OpenSSH through 7.7 is prone to a user enumeration vulnerability due to not delaying bailout for an invalid authenticating user until after the packet containing the request has been fully parsed, related to auth2-gss.c, auth2-hostbased.c, and auth2-pubkey.c.CVE-2003-1562debianopenssh+15.57%18y ago04-08-2008 10:00sshd in OpenSSH 3.6.1p2 and earlier, when PermitRootLogin is disabled and using PAM keyboard-interactive authentication, does not insert a delay after a root login attempt with the correct password, which makes it easier for remote attackers to use timing differences to determine if the password step of a multi-step authentication is successful, a different vulnerability than CVE-2003-0190.CVE-2003-0693debianopenssh+111.42%23y ago17-09-2003 04:00A "buffer management error" in buffer_append_space of buffer.c for OpenSSH before 3.7 may allow remote attackers to execute arbitrary code by causing an incorrect amount of memory to be freed and corrupting the heap, a different vulnerability than CVE-2003-0695.CVE-2003-0695debianopenssh+13.79%23y ago18-09-2003 04:00Multiple "buffer management errors" in OpenSSH before 3.7.1 may allow attackers to cause a denial of service or execute arbitrary code using (1) buffer_init in buffer.c, (2) buffer_free in buffer.c, or (3) a separate function in channels.c, a different vulnerability than CVE-2003-0693.CVE-2003-0682debianopenssh+18.79%23y ago18-09-2003 04:00"Memory bugs" in OpenSSH 3.7.1 and earlier, with unknown impact, a different set of vulnerabilities than CVE-2003-0693 and CVE-2003-0695.

All vulnerabilities inopenssh

CVE-2008-1657: openbsd openssh

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References