Lucene search

CVE-2023-25136

🗓️ 03 Feb 2023 06:09:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 758 Views🌐 WEB

OpenSSH server 9.1 introduced double-free vulnerability in kex_algorithms handling, fixed in 9.2

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 62
Tenable Nessus	EulerOS 2.0 SP10 : openssh (EulerOS-SA-2023-1959)	18 May 202300:00	–	nessus
Tenable Nessus	Fedora 38 : openssh (2023-123647648e)	20 Apr 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP10 : openssh (EulerOS-SA-2023-1981)	18 May 202300:00	–	nessus
Tenable Nessus	Fedora 37 : openssh (2023-1176c8b10c)	18 Apr 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : openssh (ALSA-2023:2645)	14 May 202300:00	–	nessus
Tenable Nessus	RHEL 9 : openssh (RHSA-2023:2645)	13 May 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.0 : openssh (EulerOS-SA-2023-2479)	28 Jul 202300:00	–	nessus
Tenable Nessus	OpenSSH 9.1 Double Free	8 Feb 202300:00	–	nessus
Tenable Nessus	EulerOS Virtualization 2.10.1 : openssh (EulerOS-SA-2023-2454)	28 Jul 202300:00	–	nessus
Tenable Nessus	Oracle Linux 9 : openssh (ELSA-2023-2645)	17 May 202300:00	–	nessus

Nvd

Node

openbsd opensshMatch9.1

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

Node

netapp ontap_select_deploy_administration_utilityMatch-

Node

netapp a250_firmwareMatch-

AND

netapp a250Match-

Node

netapp 500f_firmwareMatch-

AND

netapp 500fMatch-

Node

netapp c250_firmwareMatch-

AND

netapp c250Match-

Source	Link
news	www.news.ycombinator.com/item
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGAUIXJ3TEKCRKVWFQ6GDAGQFTIIGQQP/
openwall	www.openwall.com/lists/oss-security/2023/02/13/1
bugzilla	www.bugzilla.mindrot.org/show_bug.cgi
openwall	www.openwall.com/lists/oss-security/2023/03/09/2
ftp	www.ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/017_sshd.patch.sig
openwall	www.openwall.com/lists/oss-security/2023/02/02/2
security	www.security.netapp.com/advisory/ntap-20230309-0003/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7LKQDFZWKYHQ65TBSH2X2HJQ4V2THS3/
security	www.security.gentoo.org/glsa/202307-01

Parameter	Position	Path	Description	CWE
VICTIM_IP	binary	/cve-2023-25136.py	DoS vulnerability in OpenSSH 9.1p1 due to double-free leading to crash.	CWE-415

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Feb 2023 06:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS36.5

EPSS0.90536

CWE-415