Threats tagged 'ghsa-g5qj-pfmg-p3jp'

OpenSSH versions 9.5 through 9.7 before 9.8 contain a timing attack vulnerability related to echo-off password entry, such as during su and sudo commands. This issue arises from an ObscureKeystrokeTiming logic error, which may also allow other timing attacks against keystroke entry.