SSH server vulnerabilities

SSH servers implementing file transfer protocols are vulnerable to a denial of service attack from clients that complete the key exchange slowly or not at all, causing pending content to be read into memory but never transmitted.

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

SSH server version 1.2.27 allows a client to use the 'none' cipher, even if it is not permitted by the server policy.