Lucene search
AlmaLinuxALSA-2024:1130HistoryMar 05, 2024 - 12:00 a.m.
Moderate: openssh security update
2024-03-0500:00:00
errata.almalinux.org
98
openssh
security update
prefix truncation attack
binary packet protocol
potential command injection
shell metacharacters
cve.
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7.9
Confidence
High
EPSS
0.965
Percentile
99.6%
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.
Security Fix(es):
- ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)
- openssh: potential command injection via shell metacharacters (CVE-2023-51385)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| almalinux | 9 | aarch64 | pam_ssh_agent_auth | < 0.10.4-5.34.el9_3.3 | pam_ssh_agent_auth-0.10.4-5.34.el9_3.3.aarch64.rpm |
| almalinux | 9 | aarch64 | openssh-askpass | < 8.7p1-34.el9_3.3 | openssh-askpass-8.7p1-34.el9_3.3.aarch64.rpm |
| almalinux | 9 | ppc64le | pam_ssh_agent_auth | < 0.10.4-5.34.el9_3.3 | pam_ssh_agent_auth-0.10.4-5.34.el9_3.3.ppc64le.rpm |
| almalinux | 9 | ppc64le | openssh-askpass | < 8.7p1-34.el9_3.3 | openssh-askpass-8.7p1-34.el9_3.3.ppc64le.rpm |
| almalinux | 9 | x86_64 | openssh-askpass | < 8.7p1-34.el9_3.3 | openssh-askpass-8.7p1-34.el9_3.3.x86_64.rpm |
| almalinux | 9 | x86_64 | pam_ssh_agent_auth | < 0.10.4-5.34.el9_3.3 | pam_ssh_agent_auth-0.10.4-5.34.el9_3.3.x86_64.rpm |
| almalinux | 9 | s390x | openssh-askpass | < 8.7p1-34.el9_3.3 | openssh-askpass-8.7p1-34.el9_3.3.s390x.rpm |
| almalinux | 9 | s390x | pam_ssh_agent_auth | < 0.10.4-5.34.el9_3.3 | pam_ssh_agent_auth-0.10.4-5.34.el9_3.3.s390x.rpm |
| almalinux | 9 | s390x | openssh | < 8.7p1-34.el9_3.3 | openssh-8.7p1-34.el9_3.3.s390x.rpm |
| almalinux | 9 | s390x | openssh-server | < 8.7p1-34.el9_3.3 | openssh-server-8.7p1-34.el9_3.3.s390x.rpm |
Related
nessus
nessus
AlmaLinux 8 : openssh (ALSA-2024:0606)
2024-01-31 00:00:00
RHEL 9 : openssh (RHSA-2024:1130)
2024-03-05 00:00:00
EulerOS 2.0 SP11 : openssh (EulerOS-SA-2024-1241)
2024-03-12 00:00:00
osv
osv
Moderate: openssh security update
2024-01-30 00:00:00
Moderate: openssh security update
2024-03-05 00:00:00
openssh - security update
2023-12-22 00:00:00
gentoo
gentoo
OpenSSH: Multiple Vulnerabilities
2023-12-28 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-1475)
2024-03-21 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-1612)
2024-05-15 00:00:00
Huawei EulerOS: Security Advisory for openssh (EulerOS-SA-2024-1552)
2024-04-22 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: openssh-9.0p1-18.fc38
2024-01-23 01:22:50
[SECURITY] Fedora 39 Update: openssh-9.3p1-10.fc39
2024-01-12 01:12:26
[SECURITY] Fedora 39 Update: proftpd-1.3.8b-1.fc39
2023-12-30 01:23:29
oraclelinux
oraclelinux
openssh security update
2024-02-14 00:00:00
openssh security update
2024-03-06 00:00:00
openssh security update
2024-02-01 00:00:00
redhat
redhat
(RHSA-2024:0455) Moderate: openssh security update
2024-01-24 14:40:54
(RHSA-2024:0594) Moderate: openssh security update
2024-01-30 13:40:59
(RHSA-2024:0429) Moderate: openssh security update
2024-01-24 14:40:32
almalinux
almalinux
Moderate: openssh security update
2024-01-30 00:00:00
ibm
ibm
ubuntu
ubuntu
OpenSSH vulnerabilities
2024-01-11 00:00:00
rocky
rocky
openssh security update
2024-02-12 20:17:16
aix
aix
redos
redos
ROS-20240319-01
2024-03-19 00:00:00
debian
debian
[SECURITY] [DLA 3694-1] openssh security update
2023-12-26 02:22:30
[SECURITY] [DSA 5586-1] openssh security update
2023-12-22 08:59:42
[SECURITY] [DSA 5599-1] phpseclib security update
2024-01-12 07:13:27
mageia
mageia
Updated openssh packages fix security vulnerabilities
2024-01-15 01:23:43
Updated libssh2 packages fix a security vulnerability (Terrapin Attack)
2024-01-08 13:12:44
ubuntucve
ubuntucve
CVE-2023-51385
2023-12-20 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-51385 affecting package openssh for versions less than 9.7p1-1
2024-05-17 21:38:35
CVE-2023-51385 affecting package openssh for versions less than 8.9p1-3
2024-01-04 19:54:01
amazon
amazon
Medium: openssh
2024-03-27 21:32:00
prion
prion
Command injection
2023-12-18 19:15:00
redhatcve
redhatcve
CVE-2023-51385
2023-12-19 21:34:54
veracode
veracode
OS Command Injection
2024-01-30 17:07:03
Rogue Session Attack (Terrapin)
2023-12-19 06:46:15
alpinelinux
alpinelinux
CVE-2023-51385
2023-12-18 19:15:08
debiancve
debiancve
CVE-2023-51385
2023-12-18 19:15:08
cvelist
cvelist
CVE-2023-51385
2023-12-18 00:00:00
cloudlinux
cloudlinux
openssh: Fix of CVE-2023-51385
2023-12-28 17:39:04
nvd
nvd
CVE-2023-51385
2023-12-18 19:15:08
rosalinux
rosalinux
Advisory ROSA-SA-2024-2340
2024-02-14 09:58:40
f5
f5
K000138827 : OpenSSH vulnerability CVE-2023-51385
2024-03-06 00:00:00
cve
cve
CVE-2023-51385
2023-12-18 19:15:08
paloalto
paloalto
Impact of Terrapin SSH Attack
2024-01-09 01:30:00
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7.9
Confidence
High
EPSS
0.965
Percentile
99.6%
Related for ALSA-2024:1130