Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-46446HistoryNov 14, 2023 - 3:15 a.m.
CVE-2023-46446
2023-11-1403:15:09
Debian Security Bug Tracker
security-tracker.debian.org
10
asyncssh
remote code execution
vulnerability
unix
rogue session attack
packet injection
CVSS3
6.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
36.6%
An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a “Rogue Session Attack.”
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | python-asyncssh | <= 2.10.1-2+deb12u1 | python-asyncssh_2.10.1-2+deb12u1_all.deb |
| Debian | 11 | all | python-asyncssh | < 2.5.0-0.1+deb11u1 | python-asyncssh_2.5.0-0.1+deb11u1_all.deb |
| Debian | 999 | all | python-asyncssh | < 2.15.0-1 | python-asyncssh_2.15.0-1_all.deb |
| Debian | 13 | all | python-asyncssh | < 2.15.0-1 | python-asyncssh_2.15.0-1_all.deb |
Related
prion
prion
Design/Logic Flaw
2023-11-14 03:15:00
f5
f5
K000138577 : Python-asyncssh vulnerability CVE-2023-46446
2024-02-12 00:00:00
osv
osv
PYSEC-2023-239
2023-11-14 03:15:00
CVE-2023-46446
2023-11-14 03:15:09
AsyncSSH Rogue Session Attack
2023-11-09 18:35:14
veracode
veracode
Rogue Session
2023-11-10 07:22:52
github
github
AsyncSSH Rogue Session Attack
2023-11-09 18:35:14
cve
cve
CVE-2023-46446
2023-11-14 03:15:09
redhatcve
redhatcve
CVE-2023-46446
2023-11-17 18:51:51
cvelist
cvelist
CVE-2023-46446
2023-11-14 00:00:00
ubuntucve
ubuntucve
CVE-2023-46446
2023-11-14 00:00:00
nvd
nvd
CVE-2023-46446
2023-11-14 03:15:09
fedora
fedora
[SECURITY] Fedora 39 Update: python-asyncssh-2.14.1-1.fc39
2023-11-26 01:56:03
nessus
nessus
Fedora 39 : python-asyncssh (2023-d2956318e4)
2023-11-25 00:00:00
Debian dla-3899 : python-asyncssh-doc - security update
2024-09-27 00:00:00
openvas
openvas
Fedora: Security Advisory (FEDORA-2023-d2956318e4)
2023-11-26 00:00:00
Debian: Security Advisory (DLA-3899-1)
2024-09-30 00:00:00
CVSS3
6.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
AI Score
6.5
Confidence
High
EPSS
0.001
Percentile
36.6%
Related for DEBIANCVE:CVE-2023-46446