Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2023-48795

🗓️ 18 Dec 2023 16:15:10Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 25 Views

The SSH transport protocol in OpenSSH and other products before 9.6 allows remote attackers to bypass integrity checks, downgrading or disabling security features, known as the Terrapin attack

Related
Detection
Refs
ReporterTitlePublishedViews
Family
OSV		CGA-WWR9-QF7Q-6JQM
6 Jun 202412:29
–osv
OSV		CGA-WXVM-F23G-5XGQ
6 Jun 202412:29
–osv
OSV		CGA-X343-VM5H-F9W3
6 Jun 202412:29
–osv
OSV		CGA-X54V-H4QH-2466
6 Jun 202412:29
–osv
OSV		CGA-X68G-QMF2-VHPX
6 Jun 202412:29
–osv
OSV		CGA-X69J-449J-F37G
6 Jun 202412:26
–osv
OSV		CGA-XC48-24MH-C3JM
6 Jun 202412:29
–osv
OSV		CGA-XC4M-6PWQ-XFX2
6 Jun 202412:26
–osv
OSV		CGA-XC4Q-2GGF-44W2
6 Jun 202412:26
–osv
OSV		CGA-XFW2-PP3Q-2VR9
6 Jun 202412:26
–osv
Rows per page
NVD
Node
openbsdopensshRange<9.6
Node
puttyputtyRange<0.80
Node
filezilla-projectfilezilla_clientRange<3.66.4
Node
AND
applemacosMatch-
panictransmit_5Range<5.10.4
Node
AND
applemacosMatch-
panicnovaRange<11.8
Node
roumenpetrovpkixsshRange<14.4
Node
winscpwinscpRange<6.2.2
Node
bitvisessh_clientRange<9.33
Node
bitvisessh_serverRange<9.32
Node
lancom-systemslcosRange≤3.66.4
Node
lancom-systemslcos_fxMatch-
Node
lancom-systemslcos_lxMatch-
Node
OR
lancom-systemslcos_sxMatch4.20
lancom-systemslcos_sxMatch5.20
Node
lancom-systemslanconfigMatch-
Node
vandykesecurecrtRange<9.4.3
Node
libsshlibsshRange<0.10.6
Node
net-sshnet-sshMatch7.2.0ruby
Node
ssh2_projectssh2Range≤1.11.0node.js
Node
proftpdproftpdRange≤1.3.8b
Node
freebsdfreebsdRange≤12.4
Node
cratesthrusshRange<0.35.1
Node
tera_term_projecttera_termRange≤5.1
Node
oryx-embeddedcyclone_sshRange<2.3.4
Node
crushftpcrushftpRange≤10.6.0
Node
netsarangxshell_7Range<build__0144
Node
paramikoparamikoRange<3.4.0
Node
redhatopenshift_container_platformMatch4.0
Node
OR
redhatopenstack_platformMatch16.1
redhatopenstack_platformMatch16.2
redhatopenstack_platformMatch17.1
Node
redhatceph_storageMatch6.0
Node
OR
redhatenterprise_linuxMatch8.0
redhatenterprise_linuxMatch9.0
Node
redhatopenshift_serverlessMatch-
Node
redhatopenshift_gitopsMatch-
Node
redhatopenshift_pipelinesMatch-
Node
redhatopenshift_developer_tools_and_servicesMatch-
Node
redhatopenshift_data_foundationMatch4.0
Node
redhatopenshift_api_for_data_protectionMatch-
Node
redhatopenshift_virtualizationMatch4
Node
redhatstorageMatch3.0
Node
redhatdiscoveryMatch-
Node
redhatopenshift_dev_spacesMatch-
Node
redhatcert-manager_operator_for_red_hat_openshiftMatch-
Node
redhatkeycloakMatch-
Node
redhatjboss_enterprise_application_platformMatch7.0
Node
redhatsingle_sign-onMatch7.0
Node
OR
redhatadvanced_cluster_securityMatch3.0
redhatadvanced_cluster_securityMatch4.0
Node
golangcryptoRange<0.17.0
Node
russh_projectrusshRange<0.40.2rust
Node
sftpgo_projectsftpgoRange<2.5.6
Node
OR
erlangerlang/otpRange<22.3.4.27
erlangerlang/otpRange23.0–23.3.4.20
erlangerlang/otpRange24.0–24.3.4.15
erlangerlang/otpRange25.0–25.3.2.8
erlangerlang/otpRange26.0–26.2.1
Node
matezjschRange<0.2.15
Node
libssh2libssh2Range<1.11.1
Node
asyncssh_projectasyncsshRange<2.14.2
Node
dropbear_ssh_projectdropbear_sshRange<2022.83
Node
jadaptivemaverick_synergy_java_ssh_apiRange<3.1.0-snapshot
Node
OR
sshsshRange<4.9.1.5
sshsshRange4.10–4.11.1.7
sshsshRange4.12–4.13.2.4
sshsshRange4.14–4.15.3.1
sshsshRange5.0–5.1.1
Node
thorntechsftp_gateway_firmwareRange<3.4.6
Node
netgatepfsense_plusRange≤23.09.1
Node
netgatepfsense_ceRange≤2.7.2
Node
crushftpcrushftpRange<10.6.0
Node
connectbotsshlibRange<2.2.22
Node
apachesshdRange≤2.11.0
Node
apachesshjRange≤0.37.0
Node
tinysshtinysshRange≤20230101
Node
trileadssh2Match6401
Node
9biskittyRange≤0.76.1.13
Node
AND
gentoosecurityMatch-
debiandebian_linuxMatch-
Node
OR
fedoraprojectfedoraMatch38
fedoraprojectfedoraMatch39
Node
debiandebian_linuxMatch10.0
Node
applemacosRange14.0–14.4
SourceLink
githubwww.github.com/paramiko/paramiko/issues/2337
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/
roumenpetrovwww.roumenpetrov.info/secsh/
githubwww.github.com/TeraTermProject/teraterm/releases/tag/v5.1
bitvisewww.bitvise.com/ssh-client-version-history
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/
listswww.lists.debian.org/debian-lts-announce/2024/09/msg00042.html
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/
listswww.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 06:34Current
CVSS 3.15.9
EPSS0.93305
CWE-354
sshopensshintegrity checksterrapin attacksecurity features
25