Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2023-0356
HistoryDec 29, 2023 - 8:16 p.m.

Updated proftpd packages fix a security vulnerability

2023-12-2920:16:34
Gentoo Foundation
advisories.mageia.org
36
proftpd
packages
fix
security vulnerability
terrapin" ssh attack

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

5.9

Confidence

High

EPSS

0.965

Percentile

99.6%

JSON

ProFTPd upstream has released version 1.3.8b to fix CVE-2023-48795. From the changelog: - Implemented mitigations for “Terrapin” SSH attack (CVE-2023-48795).

OSVersionArchitecturePackageVersionFilename
Mageia9noarchproftpd< 1.3.8b-1proftpd-1.3.8b-1.mga9

Related

fedora 5
nessus 47
cbl_mariner 6
ubuntu 4
osv 85
openvas 25
debian 2
oraclelinux 3
ibm 6
redhat 5
amazon 1
ubuntucve 1
mageia 3
almalinux 1
github 1
alpinelinux 1
atlassian 1
cloudfoundry 1
redos 1
freebsd 1
fedora
fedora
[SECURITY] Fedora 38 Update: putty-0.80-1.fc38
2024-01-11 02:17:03
[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.7.0-1.fc39
2024-01-29 06:26:11
[SECURITY] Fedora 38 Update: podman-tui-0.15.0-1.fc38
2023-12-29 01:05:34
nessus
nessus
Debian dsa-5601 : php-phpseclib3 - security update
2024-01-16 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.10 : Paramiko vulnerability (USN-6598-1)
2024-01-25 00:00:00
RHEL 9 : libssh (RHSA-2024:0499)
2024-01-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package openssh for versions less than 8.9p1-4
2024-01-19 03:54:24
CVE-2023-48795 affecting package kubevirt for versions less than null
2024-01-10 08:19:37
CVE-2023-48795 affecting package libssh for versions less than 0.10.6-1
2024-01-14 22:46:30
ubuntu
ubuntu
Paramiko vulnerability
2024-01-25 00:00:00
libssh2 vulnerability
2024-01-15 00:00:00
FileZilla vulnerability
2024-01-18 00:00:00
osv
osv
Moderate: libssh security update
2024-01-31 00:00:00
Moderate: buildah security update
2024-03-05 00:00:00
lxd vulnerability
2024-04-22 09:47:43
openvas
openvas
Fedora: Security Advisory (FEDORA-2023-0355346550)
2024-09-10 00:00:00
Mageia: Security Advisory (MGASA-2024-0034)
2024-02-12 00:00:00
Fedora: Security Advisory for python-paramiko (FEDORA-2024-39a8c72ea9)
2024-01-18 00:00:00
debian
debian
[SECURITY] [DLA 3718-1] php-phpseclib security update
2024-01-25 02:26:07
[SECURITY] [DSA 5600-1] php-phpseclib security update
2024-01-12 07:13:37
oraclelinux
oraclelinux
openssh security update
2024-03-19 00:00:00
buildah security update
2024-03-07 00:00:00
openssh security update
2024-03-18 00:00:00
ibm
ibm
Security Bulletin: OpenSSH vulnerability affects IBM WebSphere Adapter for FTP shipped with IBM Business Automation Workflow - CVE-2023-48795
2024-03-22 16:29:44
Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to a machine-in-the-middle attack due to Apache MINA SSHD (CVE-2023-48795)
2024-04-04 17:46:46
Security Bulletin: Storage Virtualize Ansible Collection is affected by a vulnerability in the paramiko package
2024-06-06 12:29:51
redhat
redhat
(RHSA-2024:2768) Moderate: Red Hat OpenStack Platform 17.1 (python-paramiko) security update
2024-05-22 20:34:42
(RHSA-2024:0499) Moderate: libssh security update
2024-01-25 15:19:29
(RHSA-2024:0625) Moderate: libssh security update
2024-01-31 08:08:23
amazon
amazon
Medium: openssh
2023-12-18 09:20:00
ubuntucve
ubuntucve
CVE-2023-48795
2023-12-18 00:00:00
mageia
mageia
Updated putty package fixes a security vulnerability (Terrapin attack)
2024-01-08 13:12:44
Updated dropbear package fixes a security vulnerability
2024-01-08 22:01:05
Updated erlang packages fix a security vulnerability (Terrapin Attack)
2024-01-20 01:43:32
almalinux
almalinux
Moderate: libssh security update
2024-01-31 00:00:00
github
github
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2023-12-18 19:22:09
alpinelinux
alpinelinux
CVE-2023-48795
2023-12-18 16:15:10
atlassian
atlassian
CVE-2023-48795 vulnerability on SSH
2024-01-04 17:19:13
cloudfoundry
cloudfoundry
USN-6561-1: libssh vulnerability | Cloud Foundry
2024-04-04 00:00:00
redos
redos
ROS-20240408-15
2024-04-08 00:00:00
freebsd
freebsd
jenkins -- Terrapin SSH vulnerability in Jenkins CLI client
2024-04-17 00:00:00

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

5.9

Confidence

High

EPSS

0.965

Percentile

99.6%

JSON
Related for MGASA-2023-0356
fedora5nessus47cbl_mariner6ubuntu4osv85openvas25debian2oraclelinux3ibm6redhat5amazon1ubuntucve1mageia3almalinux1github1alpinelinux1atlassian1cloudfoundry1redos1freebsd1