CVE-2014-2653

N/A Unknown

Published: March 27, 2014 Modified: May 06, 2026

Description

The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking by presenting an unacceptable HostCertificate.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://advisories.mageia.org/MGASA-2014-0166.html

Source: cve@mitre.org

http://aix.software.ibm.com/aix/efixes/security/openssh_advisory4.asc

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2014-June/134026.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2014-May/133537.html

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=141576985122836&w=2

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2014/03/26/7

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2014-1552.html

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2015-0425.html

Source: cve@mitre.org

http://secunia.com/advisories/59855

Source: cve@mitre.org

http://www.debian.org/security/2014/dsa-2894

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2014:068

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2015:095

Source: cve@mitre.org

http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/66459

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-2164-1

Source: cve@mitre.org

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=742513

Source: cve@mitre.org

Exploit

http://advisories.mageia.org/MGASA-2014-0166.html