Damien Miller

**Name of the Vulnerable Software and Affected Versions** OpenSSH versions 5.7 through 8.4 **Description** The client side in OpenSSH has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts where no host key for the server has been cached by the client. **Recommendations** For OpenSSH versions 5.7 through 8.4, update to a version later than 8.4 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dropbear SSH versions prior to 2016.72 **Description** The issue allows remote authenticated users to bypass intended shell-command restrictions. This is achieved by sending crafted X11 forwarding data, exploiting a CRLF injection vulnerability. **Recommendations** For versions prior to 2016.72, update to version 2016.72 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** mathTeX versions prior to 20090713 **Description** The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the `dpi` tag, specifically within the `getdirective` function in `mathtex.cgi`. **Recommendations** For versions prior to 20090713, update to a version released after 20090713 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** mathTeX versions prior to 20090713 **Description** The issue is related to multiple stack-based buffer overflows in the mathtex.cgi component of mathTeX. This has an unspecified impact and can be exploited through remote attack vectors. **Recommendations** For versions prior to 20090713, update to a version released after 20090713 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** mathTeX versions prior to 20090713 **Description** The issue is related to the insecure creation of temporary files by mathtex.cgi in mathTeX, which has an unspecified impact and can be exploited through local attack vectors. **Recommendations** For versions prior to 20090713, update to a version released after 20090713 to resolve the issue.