Asyncssh Security Vulnerabilities and Issues — Asyncssh CVE List

Lucene search

Asyncssh ProjectAsyncssh

2 matches found

CVE•added 2023/11/14 3:15 a.m.•104 views

CVE-2023-46446

An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."

6.8CVSS6.4AI score0.00397EPSS

CVE•added 2023/11/14 3:15 a.m.•70 views

CVE-2023-46445

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."

5.9CVSS5.4AI score0.00422EPSS