CVE-2023-51767

🗓️ 25 Dec 2023 21:01:41Reported by redhat.comType

redhatcve

redhatcve🔗 access.redhat.com👁 476 Views

OpenSSH authentication bypass vulnerability due to DRAM row hammer attacks

Reporter	Title	Published	Views	Family All 43
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSH affects IBM Integrated Analytics System [ CVE-2023-51767]	29 Sep 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is not vulnerable to CVE-2023-51767	15 May 202417:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access	12 Jan 202623:03	–	ibm
AlpineLinux	CVE-2023-51767	24 Dec 202300:00	–	alpinelinux
BDU FSTEC	The vulnerability of the mm-answer-authpassword() function in the OpenSSH cryptographic protection mechanism allows a hacker to execute the Rowhammer attack and bypass the authentication process.	10 Jan 202400:00	–	bdu_fstec
CBLMariner	CVE-2023-51767 affecting package openssh for versions less than 1.9.4-1	7 Nov 202409:13	–	cbl_mariner
Chainguard	CVE-2023-51767 vulnerabilities	24 Dec 202307:15	–	cgr
Circl	CVE-2023-51767	24 Dec 202308:26	–	circl
CNNVD	OpenSSH Security Vulnerabilities	24 Dec 202300:00	–	cnnvd

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-51767
arxiv	www.arxiv.org/abs/2309.02545
github	www.github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c
github	www.github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

28 Sep 2024 03:48Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17

EPSS0.00007

openssh authentication bypass vulnerability dram row hammer attacks integer value bit flips mitigation red hat product security