Lucene search
RedHatRHSA-2024:0628HistoryJan 31, 2024 - 8:17 a.m.
(RHSA-2024:0628) Moderate: libssh security update
2024-01-3108:17:03
access.redhat.com
20
libssh
ssh protocol
security fix
prefix truncation attack
cve-2023-48795
cvss score
references section
unix
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.
Security Fix(es):
- ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | aarch64 | libssh-debuginfo | < 0.9.6-13.el8_9 | libssh-debuginfo-0.9.6-13.el8_9.aarch64.rpm |
| RedHat | 8 | aarch64 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.aarch64.rpm |
| RedHat | 8 | ppc64le | libssh-debugsource | < 0.9.6-13.el8_9 | libssh-debugsource-0.9.6-13.el8_9.ppc64le.rpm |
| RedHat | 8 | x86_64 | libssh-debugsource | < 0.9.6-13.el8_9 | libssh-debugsource-0.9.6-13.el8_9.x86_64.rpm |
| RedHat | 8 | s390x | libssh-debugsource | < 0.9.6-13.el8_9 | libssh-debugsource-0.9.6-13.el8_9.s390x.rpm |
| RedHat | 8 | s390x | libssh | < 0.9.6-13.el8_9 | libssh-0.9.6-13.el8_9.s390x.rpm |
| RedHat | 8 | x86_64 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.x86_64.rpm |
| RedHat | 8 | i686 | libssh-debugsource | < 0.9.6-13.el8_9 | libssh-debugsource-0.9.6-13.el8_9.i686.rpm |
| RedHat | 8 | i686 | libssh-devel | < 0.9.6-13.el8_9 | libssh-devel-0.9.6-13.el8_9.i686.rpm |
| RedHat | 8 | s390x | libssh-debuginfo | < 0.9.6-13.el8_9 | libssh-debuginfo-0.9.6-13.el8_9.s390x.rpm |
Related
nessus
nessus
openSUSE 15 Security Update : jbcrypt, trilead-ssh2 (SUSE-SU-2024:0972-1)
2024-03-23 00:00:00
EulerOS 2.0 SP10 : libssh2 (EulerOS-SA-2024-1339)
2024-03-12 00:00:00
Oracle Linux 8 : libssh (ELSA-2024-0628)
2024-02-01 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:0210-1)
2024-01-25 00:00:00
Huawei EulerOS: Security Advisory for python-paramiko (EulerOS-SA-2024-1616)
2024-05-15 00:00:00
Fedora: Security Advisory for python-paramiko (FEDORA-2024-39a8c72ea9)
2024-01-18 00:00:00
osv
osv
Moderate: libssh security update
2024-01-31 00:00:00
Moderate: buildah security update
2024-03-05 00:00:00
lxd vulnerability
2024-04-22 09:47:43
amazon
amazon
Medium: openssh
2023-12-18 09:20:00
ubuntu
ubuntu
Paramiko vulnerability
2024-01-25 00:00:00
FileZilla vulnerability
2024-01-18 00:00:00
libssh2 vulnerability
2024-01-15 00:00:00
mageia
mageia
Updated putty package fixes a security vulnerability (Terrapin attack)
2024-01-08 13:12:44
Updated dropbear package fixes a security vulnerability
2024-01-08 22:01:05
Updated filezilla packages fix a security vulnerability ("Terrapin attack")
2024-02-10 04:03:35
oraclelinux
oraclelinux
openssh security update
2024-03-19 00:00:00
openssh security update
2024-02-13 00:00:00
buildah security update
2024-03-07 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: putty-0.80-1.fc38
2024-01-11 02:17:03
[SECURITY] Fedora 38 Update: podman-tui-0.15.0-1.fc38
2023-12-29 01:05:34
[SECURITY] Fedora 39 Update: prometheus-podman-exporter-1.7.0-1.fc39
2024-01-29 06:26:11
redhat
redhat
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package openssh for versions less than 8.9p1-4
2024-01-19 03:54:24
CVE-2023-48795 affecting package erlang for versions less than 25.2-2
2024-02-25 03:00:06
CVE-2023-48795 affecting package jsch for versions less than 0.1.55-2
2024-06-01 15:23:41
debian
debian
[SECURITY] [DLA 3718-1] php-phpseclib security update
2024-01-25 02:26:31
[SECURITY] [DSA 5599-1] phpseclib security update
2024-01-12 07:13:27
[SECURITY] [DSA 5600-1] php-phpseclib security update
2024-01-12 07:13:37
ibm
ibm
Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to a machine-in-the-middle attack due to Apache MINA SSHD (CVE-2023-48795)
2024-04-04 17:46:46
github
github
ubuntucve
ubuntucve
CVE-2023-48795
2023-12-18 00:00:00
almalinux
almalinux
Moderate: libssh security update
2024-01-31 00:00:00
freebsd
freebsd
putty -- add protocol extension against 'Terrapin attack'
2023-10-16 00:00:00
jenkins -- Terrapin SSH vulnerability in Jenkins CLI client
2024-04-17 00:00:00
veracode
veracode
Rogue Session Attack (Terrapin)
2023-12-19 06:46:15
Prefix Truncation Attack (Terrapin Attack)
2023-12-19 09:12:16
cvelist
cvelist
CVE-2023-48795
2023-12-18 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2382
2024-03-26 11:47:18
redos
redos
ROS-20240422-04
2024-04-22 00:00:00
ROS-20240408-15
2024-04-08 00:00:00
paloalto
paloalto
Impact of Terrapin SSH Attack
2024-01-09 01:30:00
prion
prion
Design/Logic Flaw
2023-12-18 16:15:00
alpinelinux
alpinelinux
CVE-2023-48795
2023-12-18 16:15:10
atlassian
atlassian
CVE-2023-48795 vulnerability on SSH
2024-01-04 17:19:13
cloudfoundry
cloudfoundry
USN-6561-1: libssh vulnerability | Cloud Foundry
2024-04-04 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:19.openssh
2023-12-19 00:00:00