WaratekVRT Sign in

CVE-2020-14145 OpenSSH

Affected softwareOpenSSH
Severity5.9 Medium CVSS 3.1 3 scores
WeaknessCWE-203
Published29 Jun 2020
Updated14 Oct 2026

Description

The client side in OpenSSH 5.7 through 8.4 has an Observable Discrepancy leading to an information leak in the algorithm negotiation. This allows man-in-the-middle attackers to target initial connection attempts (where no host key for the server has been cached by the client). NOTE: some reports state that 8.5 and 8.6 are also affected.

Exploitation status

No public exploit

No exploit has been reported in the sources we check. Published 6 years ago.
  • CISA KEV not listed
  • VulnCheck KEV not listed
  • CISA Vulnrichment exploitation: none
  • Indexed PoC none indexed
  • EPSS 2.9% chance in 30 days

Waratek protection

Outside Waratek scope

A Java vulnerability, but not one Waratek protects. It affects only Java on a user's desktop (applets, Web Start, JavaFX, the installer), sits in a product the Waratek agent can't be installed into, or is in a package we don't expect in business applications. The decision below says which.

  • Protection none
  • Action not pursued none
  • Review human Researcher
  • Record active
Decided by Manual classification of this CVE in the legacy dataset
Finding A manual classification set this CVE's status to Outside Waratek scope, but the CVE names a tracked product.

CVSS

5.9 MEDIUM v3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 3 metrics

We show the highest score from the newest CVSS version. Scores from different versions can't be compared, and the first score listed is sometimes a 0.0 placeholder.

VersionScoreBandVectorAssignerType
CVSS 3.1 5.9 MEDIUM CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N NVD Primary published
CVSS 3.1 5.9 MEDIUM CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N CISA-ADP Secondary
CVSS 2.0 4.3 none AV:N/AC:M/Au:N/C:P/I:N/A:N NVD Primary

Affected software and releases

Oracle advisories

AdvisoryTypeQuarterProducts Oracle names in its risk matrix
Oracle Critical Patch Update October 2024 ↗ CPU 2024-Q4 Oracle Communications / System (OpenSSH) (4.1.0)

Oracle components and versions

FamilyComponentVersions, as Oracle lists themRead as
Oracle Communications System (OpenSSH) 4.1.0 4.1.0

Products and versions

9 products, 12 version entries
SourceVendorProductSchemeAffected versions
nvd netapp active iq unified manager generic ≥ 9.5
nvd netapp aff a700s firmware generic any version
nvd netapp hci compute node generic any version
nvd netapp hci management node generic any version
nvd netapp hci storage node generic any version
nvd netapp ontap select deploy administration utility generic any version
nvd netapp solidfire generic any version
nvd netapp steelstore cloud integrated storage generic any version
nvd openbsd openssh generic ≥ 5.7 and ＜ 8.4 · 8.4 · 8.5 · 8.6

References

URLTags
http://www.openwall.com/lists/oss-security/2020/12/02/1 Mailing List, Patch, Third Party Advisory
https://anongit.mindrot.org/openssh.git/commit/?id=b3855ff053f5078ec3d3c653cdaedefaa5fc362d Patch, Third Party Advisory
https://docs.ssh-mitm.at/CVE-2020-14145.html Third Party Advisory
https://github.com/openssh/openssh-portable/compare/V_8_3_P1...V_8_4_P1 Patch, Third Party Advisory
https://github.com/ssh-mitm/ssh-mitm/blob/master/ssh_proxy_server/plugins/session/cve202014145.py Third Party Advisory
https://security.gentoo.org/glsa/202105-35 Third Party Advisory
https://security.netapp.com/advisory/ntap-20200709-0004/ Third Party Advisory
https://www.fzi.de/en/news/news/detail-en/artikel/fsa-2020-2-ausnutzung-eines-informationslecks-fuer-gezielte-mitm-angriffe-auf-ssh-clients/ Third Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-398330.html

Timeline
Published2020-06-29By the CVE Program.
NVD record modified2026-10-14NVD's own last-modified date for this record.