Red Hat Enterprise Linux 7 OpenSSH Client Cryptographic Module
Red Hat®, Inc. - FIPS 140 #3892
The OpenSSH Client cryptographic module provides the client-side component for an SSH protocol version 2 protected communication channel. OpenSSH is the standard SSH implementation and shipped with RHEL 7. Its cryptographic mechanisms use the OpenSSL library in FIPS 140-2 mode.
Key facts
- Scheme
- FIPS 140
- Certificate
- 3892
- Standard
- FIPS 140-2
- Security level
- Level 1
- Status
- historical
- Vendor
- Red Hat®, Inc.
- Module type
- Software
- Embodiment
- Multi-Chip Stand Alone
- Lab
- atsec information security corporation
- First validated
- April 12, 2021
- Versions
- rhel7.20190626
- Caveat
- When operated in FIPS mode with module Red Hat Enterprise Linux 7 OpenSSL Module validated to FIPS 140-2 under Cert. #3867 operating in FIPS mode
Algorithms
- AES
- CVL
- DRBG
- ECDSA
- HMAC
- RSA
- SHS
- Triple-DES
Algorithm families of the CAVP certificates listed for this module, plus post-quantum algorithms named in its documents.
CVEs that may affect this product
- CVE-2017-1000253HIGH 7.8KEVEPSS 10.7%
- CVE-2000-0017HIGH 10.0EPSS 8.9%
- CVE-1999-0894HIGH 10.0EPSS 1.9%
- CVE-1999-0798HIGH 10.0EPSS 1.6%
- CVE-2019-9636CRITICAL 9.8EPSS 7.7%
- CVE-2018-18314CRITICAL 9.8EPSS 6.1%
- CVE-2018-18312CRITICAL 9.8EPSS 12.8%
- CVE-2018-18311CRITICAL 9.8EPSS 11.7%
- CVE-2018-17456CRITICAL 9.8EPSS 97.4%
- CVE-2018-16850CRITICAL 9.8EPSS 5.1%
- CVE-2018-16395CRITICAL 9.8EPSS 10.7%
- CVE-2017-5645CRITICAL 9.8EPSS 89.8%
- CVE-2011-2767CRITICAL 9.8EPSS 8.9%
- CVE-2018-18313CRITICAL 9.1EPSS 9.5%
- CVE-2016-3616HIGH 8.8EPSS 4.4%
- CVE-2018-1079HIGH 8.7EPSS 1.1%
- CVE-2018-16396HIGH 8.1EPSS 8.0%
- CVE-2017-15715HIGH 8.1EPSS 85.5%
- CVE-2019-14816HIGH 7.8EPSS 0.9%
- CVE-2018-1124HIGH 7.8EPSS 1.9%
- CVE-2016-9675HIGH 7.8EPSS 1.9%
- CVE-2018-8778HIGH 7.5EPSS 7.5%
- CVE-2018-8777HIGH 7.5EPSS 4.5%
- CVE-2018-6914HIGH 7.5EPSS 10.2%
- CVE-2018-3760HIGH 7.5EPSS 26.7%
- CVE-2018-20615HIGH 7.5EPSS 4.5%
- CVE-2018-14645HIGH 7.5EPSS 3.1%
- CVE-2018-14618HIGH 7.5EPSS 11.1%
- CVE-2018-1111HIGH 7.5EPSS 97.9%
- CVE-2018-10184HIGH 7.5EPSS 8.3%
- CVE-2017-15710HIGH 7.5EPSS 17.1%
- CVE-2017-15134HIGH 7.5EPSS 3.9%
- CVE-2015-5229HIGH 7.5EPSS 2.2%
- CVE-2001-0889HIGH 7.5EPSS 6.4%
- CVE-2001-0690HIGH 7.5EPSS 11.9%
- CVE-1999-0037HIGH 7.5EPSS 3.5%
- CVE-2000-1207HIGH 7.2EPSS 0.4%
- CVE-1999-0297HIGH 7.2EPSS 0.4%
- CVE-2018-12373MEDIUM 6.5EPSS 2.4%
- CVE-2018-12372MEDIUM 6.5EPSS 2.5%
- CVE-2007-3103MEDIUM 6.2EPSS 0.9%
- CVE-2019-12384MEDIUM 5.9EPSS 45.2%
- CVE-2018-1301MEDIUM 5.9EPSS 15.0%
- CVE-2018-11763MEDIUM 5.9EPSS 50.8%
- CVE-2021-3672MEDIUM 5.6EPSS 2.8%
- CVE-2018-1002200MEDIUM 5.5EPSS 11.6%
- CVE-2018-1000199MEDIUM 5.5EPSS 1.2%
- CVE-2015-7837MEDIUM 5.5EPSS 0.4%
- CVE-2018-1283MEDIUM 5.3EPSS 9.7%
- CVE-2015-7833MEDIUM 4.9EPSS 0.7%
and 6 more
Related CVEs and certificate references are automated matches by sec-certs, not reviewed by humans: treat them as "may be affected" and verify before acting.
Certificates it builds on
- 3867
Certificate ids found in this certificate's documents (automated extraction).
Documents and sources
Source: sec-certs.org (CRoCS, Masaryk University), from NIST CMVP and the Common Criteria Portal - dataset of September 21, 2026 - synced October 15, 2026
Check certifications from your AI assistant
The Security Certifications Explorer answers FIPS 140-3 and Common Criteria questions directly inside Claude, ChatGPT, or any MCP assistant, and links each certificate to the CVEs that may affect it.
Add the certifications brain