Not rated
CVE-2022-45047 Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA…
Description
Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey. The class is one of several implementations that an implementor using Apache MINA SSHD can choose for loading the host keys of an SSH server.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Mina SSHD 2.9 | earliest → 2.9.1 | No fix stated |
References
- www.mail-archive.com www.mail-archive.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Apache Mina SSHD
The 17 CVEs of Apache Mina SSHD →
CVE-2026-77185
Authentication bypass in sshd-core in Apache MINA SSHD versions 2.0.0 to 2.19.0 and 3.0.0-M1 to 3.0.0-M5 for a certain…
9.1
Critical
CVE-2026-93994
Apache MINA SSHD is a Java library for client-side and server-side SSH
8.1
High
CVE-2026-94053
Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 to 2.19.0 and…
9.1
Critical
CVE-2026-93995
Improper input validation in sshd-git in Apache MINA SSHD, versions up to 2.19.0 and 3.0.0-M1 to 3.0.0-M5
6.5
Medium