Catalogo CVE

CVE-2020-14145

openssh: CVE-2020-14145

[Catalogo CVE]

Gravità
Medium · CVSS 5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Published
Source
[NVD] · [CVE record]
EPSS
2.95% · Oct 22, 2026

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianopensshsid1:10.6p1-1vulnerable
Debianopensshforky1:10.6p1-1vulnerable
Debianopensshtrixie1:10.0p1-7+deb13u4vulnerable
Debianopensshtrixie-security1:10.0p1-7+deb13u2vulnerable
Debianopensshbookworm1:9.2p1-2+deb12u10vulnerable
Debianopensshbookworm-security1:9.2p1-2+deb12u9vulnerable
CpeopensshNot reportedNot reportedunknown
Cpeaff_a700s_firmwareNot reportedNot reportedunknown
Cpeactive_iq_unified_managerNot reportedNot reportedunknown
Cpehci_management_nodeNot reportedNot reportedunknown
Cpeontap_select_deploy_administration_utilityNot reportedNot reportedunknown
CpesolidfireNot reportedNot reportedunknown
Cpesteelstore_cloud_integrated_storageNot reportedNot reportedunknown
Cpehci_compute_nodeNot reportedNot reportedunknown
Cpehci_storage_nodeNot reportedNot reportedunknown
Alpineopenssh3.128.3_p1-r1fixed
Alpineopenssh3.138.4_p1-r0fixed
Alpineopenssh3.148.4_p1-r0fixed
Alpineopenssh3.158.4_p1-r0fixed
Alpineopenssh3.168.4_p1-r0fixed
Alpineopenssh3.178.4_p1-r0fixed
Alpineopenssh3.188.4_p1-r0fixed
Alpineopenssh3.198.4_p1-r0fixed
Alpineopenssh3.208.4_p1-r0fixed
Alpineopenssh3.218.4_p1-r0fixed
Alpineopenssh3.228.4_p1-r0fixed
Alpineopenssh3.238.4_p1-r0fixed
Alpineopenssh3.248.4_p1-r0fixed
Suseopensshlinux enterprise module for basesystem 15 sp28.1p1-5.9.1fixed
Suseopenssh-askpass-gnomelinux enterprise module for desktop applications 15 sp28.1p1-5.9.1fixed
Suseopensshlinux enterprise module for server applications 15 sp28.1p1-5.9.1fixed
Suseopensshlinux enterprise high performance computing 15-espos7.6p1-9.38.1fixed
Suseopensshlinux enterprise high performance computing 15-ltss7.6p1-9.38.1fixed
Suseopensshlinux enterprise server 15-ltss7.6p1-9.38.1fixed
Suseopensshlinux enterprise server for sap applications 157.6p1-9.38.1fixed
Suseopensshlinux enterprise module for basesystem 15 sp17.9p1-6.22.1fixed
Suseopenssh-askpass-gnomelinux enterprise module for desktop applications 15 sp17.9p1-6.22.1fixed
Suseopensshlinux enterprise module for server applications 15 sp17.9p1-6.22.1fixed
Suseopensshopenstack cloud 97.2p2-78.10.1fixed
Suseopenssh-askpass-gnomeopenstack cloud 97.2p2-78.10.1fixed
Suseopensshopenstack cloud crowbar 97.2p2-78.10.1fixed
Suseopenssh-askpass-gnomeopenstack cloud crowbar 97.2p2-78.10.1fixed
Suseopensshlinux enterprise server for sap applications 12 sp47.2p2-78.10.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 12 sp47.2p2-78.10.1fixed
Suseopensshlinux enterprise server 12 sp4-ltss7.2p2-78.10.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp4-ltss7.2p2-78.10.1fixed
Suseopensshlinux enterprise server 12 sp57.2p2-78.10.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp57.2p2-78.10.1fixed
Suseopensshlinux enterprise server for sap applications 12 sp57.2p2-78.10.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 12 sp57.2p2-78.10.1fixed
Opensuseopensshleap 15.17.9p1-lp151.4.18.1fixed
Opensuseopenssh-askpass-gnomeleap 15.17.9p1-lp151.4.18.1fixed
Opensuseopensshleap 15.28.1p1-lp152.4.9.1fixed
Opensuseopenssh-askpass-gnomeleap 15.28.1p1-lp152.4.9.1fixed
Suseopensshhpe helion openstack 87.2p2-74.57.1fixed
Suseopenssh-askpass-gnomehpe helion openstack 87.2p2-74.57.1fixed
Suseopensshopenstack cloud 77.2p2-74.57.1fixed
Suseopenssh-askpass-gnomeopenstack cloud 77.2p2-74.57.1fixed
Suseopensshopenstack cloud 87.2p2-74.57.1fixed
Suseopenssh-askpass-gnomeopenstack cloud 87.2p2-74.57.1fixed
Suseopensshopenstack cloud crowbar 87.2p2-74.57.1fixed
Suseopenssh-askpass-gnomeopenstack cloud crowbar 87.2p2-74.57.1fixed
Suseopensshlinux enterprise server for sap applications 12 sp27.2p2-74.57.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 12 sp27.2p2-74.57.1fixed
Suseopensshlinux enterprise server for sap applications 12 sp37.2p2-74.57.1fixed
Suseopenssh-askpass-gnomelinux enterprise server for sap applications 12 sp37.2p2-74.57.1fixed
Suseopensshlinux enterprise server 12 sp2-ltss7.2p2-74.57.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp2-ltss7.2p2-74.57.1fixed
Suseopensshlinux enterprise server 12 sp2-bcl7.2p2-74.57.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp2-bcl7.2p2-74.57.1fixed
Suseopensshlinux enterprise server 12 sp3-ltss7.2p2-74.57.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp3-ltss7.2p2-74.57.1fixed
Suseopensshlinux enterprise server 12 sp3-bcl7.2p2-74.57.1fixed
Suseopenssh-askpass-gnomelinux enterprise server 12 sp3-bcl7.2p2-74.57.1fixed
Suseopensshenterprise storage 57.2p2-74.57.1fixed
Suseopenssh-askpass-gnomeenterprise storage 57.2p2-74.57.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianopensshsourcesid(unfixed)unimportantNot reportedNot reported
Debianopensshsourceforky(unfixed)unimportantNot reportedNot reported
Debianopensshsourcetrixie(unfixed)unimportantNot reportedNot reported
Debianopensshsourcebookworm(unfixed)unimportantNot reportedNot reported
Alpineopensshapk3.128.3_p1-r1Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.138.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.148.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.158.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.168.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.178.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.188.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.198.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.208.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.218.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.228.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.238.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Alpineopensshapk3.248.4_p1-r0Not reportedALPINE-CVE-2020-14145Not reported
Suseopensshrpmlinux enterprise module for basesystem 15 sp28.1p1-5.9.1Not reportedSUSE-SU-2020:3736-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise module for desktop applications 15 sp28.1p1-5.9.1Not reportedSUSE-SU-2020:3736-1Not reported
Suseopensshrpmlinux enterprise module for server applications 15 sp28.1p1-5.9.1Not reportedSUSE-SU-2020:3736-1Not reported
Suseopensshrpmlinux enterprise high performance computing 15-espos7.6p1-9.38.1Not reportedSUSE-SU-2020:3882-1Not reported
Suseopensshrpmlinux enterprise high performance computing 15-ltss7.6p1-9.38.1Not reportedSUSE-SU-2020:3882-1Not reported
Suseopensshrpmlinux enterprise server 15-ltss7.6p1-9.38.1Not reportedSUSE-SU-2020:3882-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 157.6p1-9.38.1Not reportedSUSE-SU-2020:3882-1Not reported
Suseopensshrpmlinux enterprise module for basesystem 15 sp17.9p1-6.22.1Not reportedSUSE-SU-2020:3866-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise module for desktop applications 15 sp17.9p1-6.22.1Not reportedSUSE-SU-2020:3866-1Not reported
Suseopensshrpmlinux enterprise module for server applications 15 sp17.9p1-6.22.1Not reportedSUSE-SU-2020:3866-1Not reported
Suseopensshrpmopenstack cloud 97.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopenssh-askpass-gnomerpmopenstack cloud 97.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopensshrpmopenstack cloud crowbar 97.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopenssh-askpass-gnomerpmopenstack cloud crowbar 97.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 12 sp47.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 12 sp47.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopensshrpmlinux enterprise server 12 sp4-ltss7.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp4-ltss7.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopensshrpmlinux enterprise server 12 sp57.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp57.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 12 sp57.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 12 sp57.2p2-78.10.1Not reportedSUSE-SU-2020:3844-1Not reported
Opensuseopensshrpmleap 15.17.9p1-lp151.4.18.1Not reportedOPENSUSE-SU-2020:2298-1Not reported
Opensuseopenssh-askpass-gnomerpmleap 15.17.9p1-lp151.4.18.1Not reportedOPENSUSE-SU-2020:2298-1Not reported
Opensuseopensshrpmleap 15.28.1p1-lp152.4.9.1Not reportedOPENSUSE-SU-2020:2240-1Not reported
Opensuseopenssh-askpass-gnomerpmleap 15.28.1p1-lp152.4.9.1Not reportedOPENSUSE-SU-2020:2240-1Not reported
Suseopensshrpmhpe helion openstack 87.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmhpe helion openstack 87.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmopenstack cloud 77.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmopenstack cloud 77.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmopenstack cloud 87.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmopenstack cloud 87.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmopenstack cloud crowbar 87.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmopenstack cloud crowbar 87.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 12 sp27.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 12 sp27.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmlinux enterprise server for sap applications 12 sp37.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server for sap applications 12 sp37.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmlinux enterprise server 12 sp2-ltss7.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp2-ltss7.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmlinux enterprise server 12 sp2-bcl7.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp2-bcl7.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmlinux enterprise server 12 sp3-ltss7.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp3-ltss7.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmlinux enterprise server 12 sp3-bcl7.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmlinux enterprise server 12 sp3-bcl7.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopensshrpmenterprise storage 57.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported
Suseopenssh-askpass-gnomerpmenterprise storage 57.2p2-74.57.1Not reportedSUSE-SU-2021:0022-1Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [openssh-client]Interessata

    Pacchetto sorgente: [openssh]

    Dettagli (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

  • Pacchetto sorgente: [openssh]

    Dettagli (2)
    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

  • [openssh-server]Interessata

    Pacchetto sorgente: [openssh]

    Dettagli (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

  • Pacchetto sorgente: [openssh]

    Dettagli (2)
    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

  • [openssh-sftp-server]Interessata

    Pacchetto sorgente: [openssh]

    Dettagli (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

  • [openssh-tests]Interessata

    Pacchetto sorgente: [openssh]

    Dettagli (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

  • [ssh]Interessata

    Pacchetto sorgente: [openssh]

    Dettagli (8)
    • 1:9.2p1-2+deb12u10 · all · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u10 · all · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · all · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · all · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · all · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · all · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · all · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

  • [ssh-askpass-gnome]Interessata

    Pacchetto sorgente: [openssh]

    Dettagli (8)
    • 1:9.2p1-2+deb12u10 · amd64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u10 · arm64 · bookworm

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · amd64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:10.0p1-7~bpo12+1 · arm64 · bookworm-backports

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · amd64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u9 · arm64 · bookworm-security

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · amd64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

    • 1:9.2p1-2+deb12u7 · arm64 · bookworm-updates

      Interessata

      dsa · openssh · debian · bookworm

Osservato:

Riferimenti