PT-2020-6184 · Openssh+8 · Openssh+8

Damien Miller · Published 2020-06-29 · Updated 2026-04-09 · CVE-2020-14145

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenSSH versions 5.7 through 8.4

Description The client side in OpenSSH has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client.

Recommendations For OpenSSH versions 5.7 through 8.4, update to a version later than 8.4 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Side Channel Attack

Weakness Enumeration

CWE-200

CWE-203

Related Identifiers

ALSA-2021:4368

ALT-PU-2021-2395

ALT-PU-2021-4855

ALT-PU-2024-12010

ALT-PU-2024-12012

ALT-PU-2024-3921

ALT-PU-2024-4077

ALT-PU-2024-4467

ALT-PU-2024-7508

ALT-PU-2024-7510

ALT-PU-2024-7537

ALT-PU-2024-7539

ALT-PU-2024-7599

ALT-PU-2024-7601

ALT-PU-2024-9513

BDU:2021-03494

CESA-2021_4368

CVE-2020-14145

ECHO-06E5-62CC-395F

JLSEC-2026-63

MGASA-2021-0118

OESA-2021-1120

OPENSUSE-SU-2020:2240-1

OPENSUSE-SU-2020:2298-1

OPENSUSE-SU-2020_2240-1

OPENSUSE-SU-2020_2298-1

RHSA-2021:4368

RHSA-2021_4368

RLSA-2021:4368

SUSE-SU-2020:3736-1

SUSE-SU-2020:3844-1

SUSE-SU-2020:3866-1

SUSE-SU-2020:3882-1

SUSE-SU-2020_3736-1

SUSE-SU-2020_3844-1

SUSE-SU-2020_3866-1

SUSE-SU-2020_3882-1

SUSE-SU-2021:0022-1

SUSE-SU-2021_0022-1

USN-6279-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Openssh

Red Hat

Rocky Linux

Suse

References · 78

• 🔥 https://github.com/ssh-mitm/ssh-mitm/blob/master/ssh_proxy_server/plugins/session/cve202014145.py · Exploit
• https://github.com/openssh/openssh-portable/compare/V_8_3_P1...V_8_4_P1 · Patch
• https://security.gentoo.org/glsa/202105-35 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:3882-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2020-14145 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0118.html · Security Note
• https://cve.org/CVERecord?id=CVE-2020-14145 · Security Note
• https://linux.oracle.com/errata/ELSA-2021-4368.html · Vendor Advisory
• https://osv.dev/vulnerability/USN-6279-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2021-1120 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2021:4368 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2021:0022-1 · Vendor Advisory
• http://openwall.com/lists/oss-security/2020/12/02/1 · Patch
• https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d · Patch
• https://osv.dev/vulnerability/ALSA-2021:4368 · Vendor Advisory