Lucene search

K
f5F5F5:K000138576
HistoryFeb 12, 2024 - 12:00 a.m.

K000138576 : Python-asyncssh vulnerability CVE-2023-46445

2024-02-1200:00:00
my.f5.com
15
asyncssh extension control
man-in-the-middle attack
rogue extension negotiation
security advisory
python-asyncssh
vulnerability
cve-2023-46445
f5 products
not affected

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.2%

Security Advisory Description

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a “Rogue Extension Negotiation.” (CVE-2023-46445)

Impact

There is no impact; F5 products are not affected by this vulnerability.

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

32.2%