ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

🗓️ 05 Jun 2024 14:46:12Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

SSH prefix truncation attack removes initial messages by manipulating handshake sequences.

Reporter	Title	Published	Views	Family All 1459
ibm	Security Bulletin: IBM Tivoli Netcool Impact is vulnerable to a machine-in-the-middle attack due to Apache MINA SSHD (CVE-2023-48795)	4 Apr 202417:46	–	ibm
ibm	Security Bulletin: IBM Datapower Operations Dashboard is vulnerable to a machine-in-the-middle attack CVE-2023-48795	11 Mar 202414:52	–	ibm
ibm	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a machine-in-the-middle attack in OpenSSH [CVE-2023-48795]	29 Feb 202420:37	–	ibm
ibm	Security Bulletin: IBM Sterling B2B Integrator is affected by security vulnerability in OpenSSH	6 Feb 202520:51	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities affect IBM Data Virtualization on Cloud Pak for Data (March 2025)	27 Mar 202516:18	–	ibm
ibm	Security Bulletin: Vulnerabilities exists in IBM Netezza Analytics - NPS Product	15 Jul 202515:44	–	ibm
ibm	Security Bulletin: z/Transaction Processing Facility is affected by a vulnerability in the Apache Mina SSHD package (CVE-2023-48795)	19 Feb 202516:00	–	ibm
ibm	Security Bulletin: IBM i Access Client Solutions is vulnerable to a remote attacker bypassing integrity checks in Apache Mina SSHD Common (CVE-2023-48795)	19 Apr 202416:34	–	ibm
ibm	Security Bulletin: Multiple vulnerabilities in IBM Planning Analytics	11 Feb 202620:17	–	ibm
ibm	Security Bulletin: This Power System update is being released to address CVE-2023-48795	25 Jun 202417:31	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8	noarch	jenkins	2.440.3.1716445150-3.el8	jenkins-2.440.3.1716445150-3.el8.noarch.rpm
Red Hat Enterprise Linux	8	noarch	jenkins-2-plugins	4.13.1716445207-1.el8	jenkins-2-plugins-4.13.1716445207-1.el8.noarch.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2023-48795
access	www.access.redhat.com/solutions/7071748
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-48795
terrapin-attack	www.terrapin-attack.com/
cve	www.cve.org/CVERecord

16 Jul 2026 14:12Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.9

EPSS0.93305

SSVC

SSH protocol prefix truncation initial messages handshake sequences sequence manipulation