Skip to content
Fencer Vulns
low 3.7

CVE-2008-5161 json

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through…

published 2008-11-19 17 y ago modified 2026-06-16 4 mo ago also EUVD-2008-5139

cvss
3.7
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
18.6%
EPSS 18.6% chance of exploitation in 30 days, percentile 97%
public exploits
1
Metasploit

Summary

Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.

Patch / fix

  • openssh Debian 14, Debian 13, Debian 12 1:5.1p1-5

debian advisories DEBIAN-CVE-2008-5161

  • openssh RHEL 5 4.3p2-36.el5
  • openssh-server RHEL 5 4.3p2-36.el5
  • openssh-askpass RHEL 5 4.3p2-36.el5
  • openssh-clients RHEL 5 4.3p2-36.el5

red hat advisories RHSA-2009:1287

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2008-5161 updated cvss 2.6

OpenSSH: Plaintext Recovery Attack against CBC ciphers

  • Red Hat Enterprise Linux (v. 5 server) openssh 4.3p2-36.el5, openssh-server 4.3p2-36.el5, openssh-askpass 4.3p2-36.el5, openssh-clients 4.3p2-36.el5 Red Hat Enterprise Linux Desktop (v. 5 client) openssh 4.3p2-36.el5, openssh-server 4.3p2-36.el5, openssh-askpass 4.3p2-36.el5, openssh-clients 4.3p2-36.el5
    fixed: vendor fix RHSA-2009:1287

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
5 mo ago

Exploit prediction

18.55% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

CVSS scores

assigned by version score vector
CISA ADP 3.1 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CNA 3.1 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD 2.0 2.6 AV:N/AC:H/Au:N/C:P/I:N/A:N

Classification

Weakness
  • CWE-329 Generation of Predictable IV with CBC Mode
  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.