Lucene search
K

6 matches found

OSV
OSV
added 2023/11/14 3:15 a.m.0 views

DEBIAN-CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

5.9CVSS5.8AI score0.00448EPSS
Exploits0References1
Prion
Prion
added 2023/11/14 3:15 a.m.8 views

Design/Logic Flaw

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

2.6CVSS5.5AI score0.00448EPSS
Exploits0References7Affected Software1
UbuntuCve
UbuntuCve
added 2023/11/14 3:15 a.m.41 views

CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

5.9CVSS6.2AI score0.00448EPSS
Exploits0References4
OSV
OSV
added 2023/11/14 3:15 a.m.1 views

PYSEC-2023-237

An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack...

5.9CVSS5.9AI score0.00448EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2023/11/14 12:0 a.m.27 views

CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

5.9CVSS5.8AI score0.00448EPSS
Exploits0
OSV
OSV
added 2023/11/09 6:34 p.m.1 views

GHSA-CFC2-WR2V-GXM5 AsyncSSH Rogue Extension Negotiation

Summary An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack. Details The rogue extension negotiation attack targets an AsyncSSH client connecting to any SSH server sending an extension info message. The attack...

5.3CVSS6.1AI score0.00448EPSS
Exploits0References12
Rows per page
Query Builder