Security Bulletin: IBM QRadar SIEM is not vulnerable to CVE-2023-51767

Summary

An authentication bypass vulnerability was found in OpenSSH, however IBM QRadar SIEM is not vulnerable to it.

Vulnerability Details

CVEID:CVE-2023-51767
**DESCRIPTION:**OpenSSH could allow a local authenticated attacker to bypass security restrictions, caused by improper authentication. By conducting a row hammer attack against the mm_answer_authpassword integer value to flip a single bit, an attacker could exploit this vulnerability to bypass authentication and obtain administrative access.
CVSS Base score: 7
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/275816 for the current score.
CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)

Affected Products and Versions

Remediation/Fixes

RHEL by default implements ASLR as a mitigation for this CVE-2023-51767. Hence, no further action is needed.

Workarounds and Mitigations

For more information see:
<https://bugzilla.mindrot.org/show_bug.cgi?id=3656&gt;