Lucene search
AlmaLinuxALSA-2024:0628HistoryJan 31, 2024 - 12:00 a.m.
Moderate: libssh security update
2024-01-3100:00:00
errata.almalinux.org
23
libssh
security update
ssh protocol
server applications
prefix truncation attack
bpp
cve-2023-48795
unix
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
7.2 High
AI Score
Confidence
Low
0.963 High
EPSS
Percentile
99.5%
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.
Security Fix(es):
- ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 8 | i686 | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.i686.rpm |
| almalinux | 8 | noarch | libssh-config | < 0.9.6-13.el8_9 | libssh-config-0.9.6-13.el8_9.noarch.rpm |
| almalinux | 8 | i686 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.i686.rpm |
| almalinux | 8 | x86_64 | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.x86_64.rpm |
| almalinux | 8 | aarch64 | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.aarch64.rpm |
| almalinux | 8 | x86_64 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.x86_64.rpm |
| almalinux | 8 | aarch64 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.aarch64.rpm |
| almalinux | 8 | ppc64le | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.ppc64le.rpm |
| almalinux | 8 | ppc64le | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.ppc64le.rpm |
| almalinux | 8 | s390x | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.s390x.rpm |
Related
redhat
redhat
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:19.openssh
2023-12-19 00:00:00
nessus
nessus
SUSE SLES15 Security Update : openssh (SUSE-SU-2023:4905-1)
2023-12-21 00:00:00
Amazon Linux AMI : openssh (ALAS-2023-1898)
2023-12-18 00:00:00
oraclelinux
oraclelinux
libssh security update
2024-02-01 00:00:00
openssh security update
2024-02-13 00:00:00
openssh security update
2024-03-19 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package libssh2 for versions less than 1.9.0-4
2024-02-25 03:00:06
CVE-2023-48795 affecting package cri-o for versions less than 1.30.1-1
2024-06-21 09:32:44
redos
redos
ROS-20240409-04
2024-04-09 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3719-1)
2024-01-25 00:00:00
Debian: Security Advisory (DLA-3730-1)
2024-02-01 00:00:00
Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2024-1455)
2024-03-21 00:00:00
debian
debian
[SECURITY] [DLA 3730-1] python-asyncssh security update
2024-02-01 00:13:38
[SECURITY] [DSA 5599-1] phpseclib security update
2024-01-12 07:13:27
[SECURITY] [DLA 3718-1] php-phpseclib security update
2024-01-25 02:26:07
ibm
ibm
f5
f5
K000138264 : SSH vulnerability CVE-2023-48795
2024-01-17 00:00:00
hackerone
hackerone
cgr
cgr
CVE-2023-48795 vulnerabilities
2024-05-19 03:07:16
thn
thn
New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security
2024-01-01 09:37:00
osv
osv
paramiko vulnerability
2024-01-25 12:44:31
CGA-f9g2-26qr-3m89
2024-06-22 00:06:58
phpseclib - security update
2024-01-25 00:00:00
nvd
nvd
CVE-2023-48795
2023-12-18 16:15:10
amazon
amazon
Medium: openssh
2023-12-18 09:20:00
Medium: openssh
2023-12-18 09:20:00
freebsd
freebsd
FreeBSD -- Prefix Truncation Attack in the SSH protocol
2023-12-19 00:00:00
putty -- add protocol extension against 'Terrapin attack'
2023-10-16 00:00:00
mageia
mageia
Updated proftpd packages fix a security vulnerability
2023-12-29 20:16:34
Updated filezilla packages fix a security vulnerability ("Terrapin attack")
2024-02-10 04:03:35
Updated libssh2 packages fix a security vulnerability (Terrapin Attack)
2024-01-08 13:12:44
debiancve
debiancve
CVE-2023-48795
2023-12-18 16:15:10
fedora
fedora
[SECURITY] Fedora 39 Update: proftpd-1.3.8b-1.fc39
2023-12-30 01:23:29
[SECURITY] Fedora 39 Update: golang-x-crypto-0.18.0-1.fc39
2024-01-18 01:47:06
[SECURITY] Fedora 38 Update: prometheus-podman-exporter-1.7.0-1.fc38
2024-01-29 07:54:09
cvelist
cvelist
CVE-2023-48795
2023-12-18 00:00:00
veracode
veracode
Prefix Truncation Attack (Terrapin Attack)
2023-12-19 09:12:16
Rogue Session Attack (Terrapin)
2023-12-19 06:46:15
rosalinux
rosalinux
Advisory ROSA-SA-2024-2382
2024-03-26 11:47:18
paloalto
paloalto
Impact of Terrapin SSH Attack
2024-01-09 01:30:00
prion
prion
Design/Logic Flaw
2023-12-18 16:15:00
ubuntu
ubuntu
Paramiko vulnerability
2024-01-25 00:00:00
libssh2 vulnerability
2024-01-15 00:00:00
ubuntucve
ubuntucve
CVE-2023-48795
2023-12-18 00:00:00
github
github
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
7.2 High
AI Score
Confidence
Low
0.963 High
EPSS
Percentile
99.5%
Related for ALSA-2024:0628