CVE-2023-48795

CVE-2023-48795를 위한 OpenSSH 취약점 스캐너 이 Python 기반 도구는 시스템에서 OpenSSH 설치 여부를 스캔하고 OpenSSH 9.6 이전 버전에 영향을 미치는 심각한 취약점인 CVE-2023-48795 에 취약한지 확인합니다. 이 스크립트는 스캔된 시스템에 대한 상세 보고서를 제공하며, 취약점이 발견된 경우 업그레이드 권장 사항을 포함합니다. CVE-2023-48795: 취약점 개요 CVE ID : CVE-2023-48795 설명 : OpenSSH 버전 9.6 이전의 취약점으로 인해 원격 공격자가 보...

sshfinder

sshfinder 네트워크의 모든 SSH 서비스를 찾아내고, 표준을 충족하는지 판단하며, 변경 사항이 발생하면 알려줍니다. sshfinder는 필수 종속성이 없는 단일 Python 파일입니다. CIDR 범위를 지정하면 포트 22뿐만 아니라 실제로 수신 대기 중인 모든 곳에서 SSH를 발견하고, 각 서비스가 실제로 SSH를 사용하는지 확인하며, 암호화 상태를 평가하고, 정책을 위반하는 항목이 있으면 0이 아닌 종료 코드를 반환합니다. 해결하는 문제 대부분의 팀은 자체 SSH 자산에 대한 세 가지 질문에 답할 수 없습니다: 1...

Scanner_CVE_OpenSSH

CVE-2024-6387 및 CVE-2023-48795에 취약할 가능성이 있는 SSH 소프트웨어 서버 식별 스캐너 포함된 CVE CVE| 이름| 조건| 심각도 ---|---|---|--- CVE-2024-6387| regreSSHion| OpenSSH dnspython은 선택 사항이지만 적극 권장됩니다 — 병렬 역방향 조회가 이 라이브러리를 사용하면 훨씬 빨라집니다...

SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker

terrapincheck.py CVE-2023-48795 — SSH Terrapin 접두사 잘림prefix truncation 취약점을 위한 경량 Python 스캐너입니다. Terrapin 은 SSH의 프로토콜 수준 취약점으로, 능동적 중간자MitM 공격자가 협상된 확장 정보를 잘라내 연결 보안을 낮출 수 있게 합니다. 가장 치명적인 영향은 ext-info서버 서명 알고리즘에 사용와 pingOpenSSH의 no-auth 확장에 사용을 비활성화하는 것입니다. 📋 목차 취약점 정보 동작 원리 요구 사항 설치 사용법 출력 취약 조건...

CLEANSTART-2024-AM41653 SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9

CVE-2023-48795 affects multiple packages. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9. See references for individual vulnerability details...

Rocky Linux 9.2 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc (ciqsa-2026_0451)

The Rocky Linux 9.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260451 advisory. This advisory aggregates security fixes for the libssh SRPM in CIQ LTS 9.2. It addresses 1 CVE: CVE-2023-48795. Tenable has extracted the preceding description...

Rocky Linux 8.6 [CIQ] Security Update: libssh / libssh-config / libssh-debuginfo / libssh-debugsource / etc Multiple Vulnerabilities (ciqsa-2026_0087)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260087 advisory. This advisory aggregates security fixes for the libssh SRPM in CIQ LTS 8.6. It addresses 4 CVEs: CVE-2023-51385, CVE-2023-1667, CVE-2023-2283,...

CentOS Linux 7 [TuxCare] Security Update: openssh / openssh-askpass / openssh-cavs / openssh-clients / etc (CENTOS7:CLSA-2024:1707919380)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1707919380 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900...

CLEANSTART-2026-IP32921 Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795

Security vulnerability affects the sonarqube package. Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795...

Photon OS 5.0: Erlang PHSA-2024-5.0-91-0188

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0188. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Openssh PHSA-2024-5.0-91-0188

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0188. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Python3 PHSA-2024-5.0-91-0187

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-91-0187. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHCOS 4 : OpenShift Container Platform 4.14.30 (RHSA-2024:3918)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3918 advisory. - ssh: Prefix truncation attack on Binary Packet Protocol BPP CVE-2023-48795 Note that Nessus has not tested for this issue but has instead...

Photon OS 4.0: Openssh PHSA-2026-4.0-0985

An update of the openssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-4.0-0985. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Mageia: Security Advisory (MGASA-2026-0066)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated trilead-ssh2 packages fix security vulnerabilities

CVE-2023-48795: Fixed prefix truncation breaking ssh channel integrity aka Terrapin Attack...

CVE-2023-48795 affecting package rust for versions less than 1.90.0-1

CVE-2023-48795 affecting package rust for versions less than 1.90.0-1. An upgraded version of the package is available that resolves this issue...

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by incorrect validation of integrity check due to OpenSSH

Summary OpenSSH is used by IBM Operations Analytics - Log Analysis as part of implementations of SSH servers and clients. CVE-2023-48795. Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other...

Security Bulletin: Multiple vulnerabilities in IBM QRadar SIEM

Summary Multiple vulnerabilities were addressed in IBM QRadar SIEM version 7.5.0 UP14 IF02 Vulnerability Details CVEID:CVE-2023-48795 DESCRIPTION: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrit...

TencentOS Server 4: openssh (TSSA-2024:0950)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0950 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...