Lucene search
OracleLinuxELSA-2024-12158HistoryFeb 13, 2024 - 12:00 a.m.
openssh security update
2024-02-1300:00:00
linux.oracle.com
11
openssh
security update
kex_initial
strict key exchange
cve-2023-48795
orabug
unix
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
9.8 High
AI Score
Confidence
High
0.962 High
EPSS
Percentile
99.5%
[7.4p1-23.0.3]
- add KEX_INITIAL flag [Orabug: 36160445]
- implement ‘strict key exchange’ [CVE-2023-48795][Orabug: 36160445]
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 7 | src | openssh | < 7.4p1-23.0.3.el7_9 | openssh-7.4p1-23.0.3.el7_9.src.rpm |
| oracle linux | 7 | src | openssh | < 7.4p1-23.0.3.el7_9 | openssh-7.4p1-23.0.3.el7_9.src.rpm |
| oracle linux | 7 | src | openssh | < 7.4p1-23.0.3.el7_9 | openssh-7.4p1-23.0.3.el7_9.src.rpm |
| oracle linux | 7 | aarch64 | openssh | < 7.4p1-23.0.3.el7_9 | openssh-7.4p1-23.0.3.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | openssh | < 7.4p1-23.0.3.el7_9 | openssh-7.4p1-23.0.3.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | openssh-askpass | < 7.4p1-23.0.3.el7_9 | openssh-askpass-7.4p1-23.0.3.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | openssh-askpass | < 7.4p1-23.0.3.el7_9 | openssh-askpass-7.4p1-23.0.3.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | openssh-cavs | < 7.4p1-23.0.3.el7_9 | openssh-cavs-7.4p1-23.0.3.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | openssh-clients | < 7.4p1-23.0.3.el7_9 | openssh-clients-7.4p1-23.0.3.el7_9.aarch64.rpm |
| oracle linux | 7 | aarch64 | openssh-clients | < 7.4p1-23.0.3.el7_9 | openssh-clients-7.4p1-23.0.3.el7_9.aarch64.rpm |
Related
almalinux
almalinux
Moderate: libssh security update
2024-01-31 00:00:00
nessus
nessus
openSUSE 15 Security Update : jbcrypt, trilead-ssh2 (SUSE-SU-2024:0972-1)
2024-03-23 00:00:00
Oracle Linux 7 : openssh (ELSA-2024-12158)
2024-02-14 00:00:00
amazon
amazon
Medium: openssh
2023-12-18 09:20:00
Medium: openssh
2023-12-18 09:20:00
ubuntucve
ubuntucve
CVE-2023-48795
2023-12-18 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: podman-tui-0.15.0-1.fc38
2023-12-29 01:05:34
[SECURITY] Fedora 38 Update: putty-0.80-1.fc38
2024-01-11 02:17:03
[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.7.0-1.fc39
2024-01-29 06:26:11
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package openssh for versions less than 8.9p1-4
2024-01-19 03:54:24
CVE-2023-48795 affecting package libssh2 for versions less than 1.9.0-4
2024-02-25 03:00:06
osv
osv
Moderate: libssh security update
2024-01-31 00:00:00
Moderate: buildah security update
2024-03-05 00:00:00
libssh2 vulnerability
2024-01-15 18:31:03
openvas
openvas
Fedora: Security Advisory for python-paramiko (FEDORA-2024-39a8c72ea9)
2024-01-18 00:00:00
Fedora: Security Advisory for podman-tui (FEDORA-2023-cb8c606fbb)
2023-12-29 00:00:00
redhat
redhat
ibm
ibm
Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to a machine-in-the-middle attack due to Apache MINA SSHD (CVE-2023-48795)
2024-04-04 17:46:46
mageia
mageia
Updated putty package fixes a security vulnerability (Terrapin attack)
2024-01-08 13:12:44
Updated dropbear package fixes a security vulnerability
2024-01-08 22:01:05
Updated proftpd packages fix a security vulnerability
2023-12-29 20:16:34
debian
debian
[SECURITY] [DLA 3718-1] php-phpseclib security update
2024-01-25 02:26:07
[SECURITY] [DLA 3730-1] python-asyncssh security update
2024-02-01 00:13:38
[SECURITY] [DSA 5599-1] phpseclib security update
2024-01-12 07:13:27
oraclelinux
oraclelinux
openssh security update
2024-03-19 00:00:00
libssh security update
2024-02-01 00:00:00
ubuntu
ubuntu
Paramiko vulnerability
2024-01-25 00:00:00
FileZilla vulnerability
2024-01-18 00:00:00
LXD vulnerability
2024-04-22 00:00:00
github
github
debiancve
debiancve
CVE-2023-48795
2023-12-18 16:15:10
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:19.openssh
2023-12-19 00:00:00
thn
thn
New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security
2024-01-01 09:37:00
freebsd
freebsd
FreeBSD -- Prefix Truncation Attack in the SSH protocol
2023-12-19 00:00:00
putty -- add protocol extension against 'Terrapin attack'
2023-10-16 00:00:00
jenkins -- Terrapin SSH vulnerability in Jenkins CLI client
2024-04-17 00:00:00
f5
f5
K000138264 : SSH vulnerability CVE-2023-48795
2024-01-17 00:00:00
nvd
nvd
CVE-2023-48795
2023-12-18 16:15:10
redos
redos
ROS-20240409-04
2024-04-09 00:00:00
ROS-20240408-15
2024-04-08 00:00:00
hackerone
hackerone
cgr
cgr
CVE-2023-48795 vulnerabilities
2024-05-19 03:07:16
rosalinux
rosalinux
Advisory ROSA-SA-2024-2382
2024-03-26 11:47:18
paloalto
paloalto
Impact of Terrapin SSH Attack
2024-01-09 01:30:00
cvelist
cvelist
CVE-2023-48795
2023-12-18 00:00:00
veracode
veracode
Prefix Truncation Attack (Terrapin Attack)
2023-12-19 09:12:16
Rogue Session Attack (Terrapin)
2023-12-19 06:46:15
prion
prion
Design/Logic Flaw
2023-12-18 16:15:00
alpinelinux
alpinelinux
CVE-2023-48795
2023-12-18 16:15:10
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
9.8 High
AI Score
Confidence
High
0.962 High
EPSS
Percentile
99.5%
Related for ELSA-2024-12158