What Is The Command to Find What Version of SSH You Are Using?

Problem scenario
You are concerned you have an older, vulnerable version of OpenSSH. What command should you run to see what version you are using?

Solution
ssh -V

Versions from 4.4p1 up to, but not including, 8.5p1 are not vulnerable due to a transformative patch for CVE-2006-5051, which made a previously unsafe function secure.

https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server

Leave a comment

Your email address will not be published. Required fields are marked *