Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2024-0015
HistoryJan 20, 2024 - 1:43 a.m.

Updated erlang packages fix a security vulnerability (Terrapin Attack)

2024-01-2001:43:32
Gentoo Foundation
advisories.mageia.org
19
erlang
security
vulnerability
fix
ssh
prefix truncation
terrapin attack
cve-2023-48795
unix

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

7.2 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

JSON

The updated packages fix a security vulnerability: Prefix Truncation Attacks in SSH Specification (Terrapin Attack): erlang-ssh. (CVE-2023-48795)

OSVersionArchitecturePackageVersionFilename
Mageia9noarcherlang< 24.3.4.15-1erlang-24.3.4.15-1.mga9

Related

atlassian 1
oraclelinux 4
fedora 11
osv 16
cbl_mariner 10
ubuntu 4
debian 3
openvas 49
cloudfoundry 1
freebsd 3
ibm 8
redos 2
nessus 64
alpinelinux 1
redhat 6
amazon 1
mageia 5
almalinux 1
ubuntucve 1
github 1
prion 1
rosalinux 1
veracode 2
paloalto 1
cvelist 1
thn 1
atlassian
atlassian
CVE-2023-48795 vulnerability on SSH
2024-01-04 17:19:13
oraclelinux
oraclelinux
buildah security update
2024-03-07 00:00:00
openssh security update
2024-03-18 00:00:00
openssh security update
2024-03-19 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: putty-0.80-1.fc39
2024-01-11 01:17:14
[SECURITY] Fedora 38 Update: podman-tui-0.15.0-1.fc38
2023-12-29 01:05:34
[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.7.0-1.fc39
2024-01-29 06:26:11
osv
osv
Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto
2023-12-18 21:18:26
libssh vulnerability
2023-12-19 13:08:22
php-phpseclib3 - security update
2024-01-12 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package kubevirt for versions less than null
2024-01-10 08:19:37
CVE-2023-48795 affecting package libssh for versions less than 0.10.6-1
2024-01-14 22:46:30
CVE-2023-48795 affecting package moby-cli for versions less than 20.10.27-2
2024-01-19 03:54:24
ubuntu
ubuntu
libssh2 vulnerability
2024-01-15 00:00:00
LXD vulnerability
2024-04-22 00:00:00
FileZilla vulnerability
2024-01-18 00:00:00
debian
debian
[SECURITY] [DSA 5600-1] php-phpseclib security update
2024-01-12 07:13:37
[SECURITY] [DLA 3718-1] php-phpseclib security update
2024-01-25 02:26:07
[SECURITY] [DSA 5599-1] phpseclib security update
2024-01-12 07:13:27
openvas
openvas
Fedora: Security Advisory for podman (FEDORA-2024-06ebb70bdd)
2024-01-20 00:00:00
Fedora: Security Advisory for golang-x-crypto (FEDORA-2024-7b08207cdb)
2024-01-18 00:00:00
Fedora: Security Advisory for golang-x-crypto (FEDORA-2024-2705241461)
2024-01-18 00:00:00
cloudfoundry
cloudfoundry
USN-6561-1: libssh vulnerability | Cloud Foundry
2024-04-04 00:00:00
freebsd
freebsd
jenkins -- Terrapin SSH vulnerability in Jenkins CLI client
2024-04-17 00:00:00
putty -- add protocol extension against 'Terrapin attack'
2023-10-16 00:00:00
FreeBSD -- Prefix Truncation Attack in the SSH protocol
2023-12-19 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in net-ssh-4.2.0.gem
2024-05-30 07:47:08
Security Bulletin: IBM MQ Appliance vulnerable to "Terrapin" attack in OpenSSH (CVE-2023-48795)
2024-06-27 03:28:46
Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to a machine-in-the-middle attack due to Apache MINA SSHD (CVE-2023-48795)
2024-04-04 17:46:46
redos
redos
ROS-20240408-15
2024-04-08 00:00:00
ROS-20240409-04
2024-04-09 00:00:00
nessus
nessus
Fedora 38 : python-paramiko (2024-39a8c72ea9)
2024-01-10 00:00:00
Debian dla-3730 : python-asyncssh-doc - security update
2024-02-01 00:00:00
EulerOS 2.0 SP11 : python-paramiko (EulerOS-SA-2024-1246)
2024-03-12 00:00:00
alpinelinux
alpinelinux
CVE-2023-48795
2023-12-18 16:15:10
redhat
redhat
(RHSA-2024:0625) Moderate: libssh security update
2024-01-31 08:08:23
(RHSA-2024:1196) Moderate: Red Hat JBoss Enterprise Application Platform 7.4 security update
2024-03-06 17:50:02
(RHSA-2024:1150) Moderate: buildah security update
2024-03-05 15:32:31
amazon
amazon
Medium: openssh
2023-12-18 09:20:00
mageia
mageia
Updated putty package fixes a security vulnerability (Terrapin attack)
2024-01-08 13:12:44
Updated dropbear package fixes a security vulnerability
2024-01-08 22:01:05
Updated filezilla packages fix a security vulnerability ("Terrapin attack")
2024-02-10 04:03:35
almalinux
almalinux
Moderate: libssh security update
2024-01-31 00:00:00
ubuntucve
ubuntucve
CVE-2023-48795
2023-12-18 00:00:00
github
github
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2023-12-18 19:22:09
prion
prion
Design/Logic Flaw
2023-12-18 16:15:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2382
2024-03-26 11:47:18
veracode
veracode
Rogue Session Attack (Terrapin)
2023-12-19 06:46:15
Prefix Truncation Attack (Terrapin Attack)
2023-12-19 09:12:16
paloalto
paloalto
Impact of Terrapin SSH Attack
2024-01-09 01:30:00
cvelist
cvelist
CVE-2023-48795
2023-12-18 00:00:00
thn
thn
New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security
2024-01-01 09:37:00

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

7.2 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

JSON
Related for MGASA-2024-0015
atlassian1oraclelinux4fedora11osv16cbl_mariner10ubuntu4debian3openvas49cloudfoundry1freebsd3ibm8redos2nessus64alpinelinux1redhat6amazon1mageia5almalinux1ubuntucve1github1prion1rosalinux1veracode2paloalto1cvelist1thn1