Lucene search
UbuntuUSN-6598-1HistoryJan 25, 2024 - 12:00 a.m.
Paramiko vulnerability
2024-01-2500:00:00
ubuntu.com
14
ubuntu
paramiko
ssh
vulnerability
prefix truncation
attack
extension negotiation
terrapin
protocol extensions
Releases
- Ubuntu 23.10
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
Packages
- paramiko - Python SSH2 library
Details
Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk discovered that the SSH
protocol was vulnerable to a prefix truncation attack. If a remote attacker
was able to intercept SSH communications, extension negotiation messages
could be truncated, possibly leading to certain algorithms and features
being downgraded. This issue is known as the Terrapin attack. This update
adds protocol extensions to mitigate this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 23.10 | noarch | python3-paramiko | < 2.12.0-2ubuntu1.23.10.2 | UNKNOWN |
| Ubuntu | 23.10 | noarch | paramiko-doc | < 2.12.0-2ubuntu1.23.10.2 | UNKNOWN |
| Ubuntu | 22.04 | noarch | python3-paramiko | < 2.9.3-0ubuntu1.2 | UNKNOWN |
| Ubuntu | 22.04 | noarch | paramiko-doc | < 2.9.3-0ubuntu1.2 | UNKNOWN |
| Ubuntu | 20.04 | noarch | python3-paramiko | < 2.6.0-2ubuntu0.3 | UNKNOWN |
| Ubuntu | 20.04 | noarch | paramiko-doc | < 2.6.0-2ubuntu0.3 | UNKNOWN |
References
Related
nessus
nessus
Fedora 39 : podman (2024-3bb23c77f3)
2024-01-08 00:00:00
Fedora 39 : putty (2024-d946b9ad25)
2024-01-10 00:00:00
paloalto
paloalto
Impact of Terrapin SSH Attack
2024-01-09 01:30:00
openvas
openvas
Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2024-1178)
2024-02-09 00:00:00
Huawei EulerOS: Security Advisory for libssh2 (EulerOS-SA-2024-1317)
2024-03-13 00:00:00
Prefix Truncation Attacks in SSH Specification (Terrapin Attack)
2023-12-20 00:00:00
redhat
redhat
(RHSA-2024:0628) Moderate: libssh security update
2024-01-31 08:17:03
(RHSA-2024:0625) Moderate: libssh security update
2024-01-31 08:08:23
ibm
ibm
osv
osv
python-asyncssh - security update
2024-02-01 00:00:00
phpseclib - security update
2024-01-25 00:00:00
php-phpseclib - security update
2024-01-12 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: python-paramiko-3.4.0-1.fc38
2024-01-11 02:17:01
[SECURITY] Fedora 39 Update: golang-x-crypto-0.18.0-1.fc39
2024-01-18 01:47:06
[SECURITY] Fedora 38 Update: podman-4.8.3-1.fc38
2024-01-19 03:25:05
freebsd
freebsd
putty -- add protocol extension against 'Terrapin attack'
2023-10-16 00:00:00
jenkins -- Terrapin SSH vulnerability in Jenkins CLI client
2024-04-17 00:00:00
FreeBSD -- Prefix Truncation Attack in the SSH protocol
2023-12-19 00:00:00
mageia
mageia
Updated filezilla packages fix a security vulnerability ("Terrapin attack")
2024-02-10 04:03:35
Updated libssh2 packages fix a security vulnerability (Terrapin Attack)
2024-01-08 13:12:44
Updated dropbear package fixes a security vulnerability
2024-01-08 22:01:05
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package erlang for versions less than 25.2-2
2024-02-25 03:00:06
CVE-2023-48795 affecting package jsch for versions less than 0.1.55-2
2024-05-17 09:07:16
rosalinux
rosalinux
Advisory ROSA-SA-2024-2382
2024-03-26 11:47:18
veracode
veracode
Rogue Session Attack (Terrapin)
2023-12-19 06:46:15
Prefix Truncation Attack (Terrapin Attack)
2023-12-19 09:12:16
debian
debian
[SECURITY] [DSA 5599-1] phpseclib security update
2024-01-12 07:13:27
[SECURITY] [DLA 3718-1] php-phpseclib security update
2024-01-25 02:26:31
[SECURITY] [DSA 5600-1] php-phpseclib security update
2024-01-12 07:13:37
oraclelinux
oraclelinux
openssh security update
2024-02-13 00:00:00
openssh security update
2024-03-19 00:00:00
buildah security update
2024-03-07 00:00:00
prion
prion
Design/Logic Flaw
2023-12-18 16:15:00
cvelist
cvelist
CVE-2023-48795
2023-12-18 00:00:00
almalinux
almalinux
Moderate: libssh security update
2024-01-31 00:00:00
amazon
amazon
Medium: openssh
2023-12-18 09:20:00
github
github
ubuntucve
ubuntucve
CVE-2023-48795
2023-12-18 00:00:00
cloudfoundry
cloudfoundry
USN-6561-1: libssh vulnerability | Cloud Foundry
2024-04-04 00:00:00
redos
redos
ROS-20240408-15
2024-04-08 00:00:00
ROS-20240409-04
2024-04-09 00:00:00
atlassian
atlassian
CVE-2023-48795 vulnerability on SSH
2024-01-04 17:19:13
ubuntu
ubuntu
FileZilla vulnerability
2024-01-18 00:00:00
libssh2 vulnerability
2024-01-15 00:00:00
LXD vulnerability
2024-04-22 00:00:00
alpinelinux
alpinelinux
CVE-2023-48795
2023-12-18 16:15:10
thn
thn
New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security
2024-01-01 09:37:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:19.openssh
2023-12-19 00:00:00
debiancve
debiancve
CVE-2023-48795
2023-12-18 16:15:10