Lucene search
+L

1 matches found

OSV
OSV
added 2024/01/08 7:01 p.m.11 views

MGASA-2024-0004 Updated dropbear package fixes a security vulnerability

Parts of the SSH specification are vulnerable to a novel prefix truncation attack a.k.a. Terrapin attack, which allows a man-in-the-middle attacker to strip an arbitrary number of messages right after the initial key exchange, breaking SSH extension negotiation RFC8308 in the process and thus...

5.9CVSS6.6AI score0.93305EPSS
SaveExploits4References3
Rows per page
Query Builder