5.9 CVE-2023-48795

Patch Exploit
 

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.
https://nvd.nist.gov/vuln/detail/CVE-2023-48795

Categories

CWE-354 : Improper Validation of Integrity Check Value
Improper validation of checksums before use results in an unnecessary risk that can easily be mitigated. The protocol specification describes the algorithm used for calculating the checksum. It is then a simple matter of implementing the calculation and verifying that the calculated checksum and the received checksum match. Improper verification of the calculated checksum and the received checksum can lead to far greater consequences.

References

af854a3a-2127-422b-91ae-364da2661108 Patch Exploit

http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening...
Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/12/18/3
Mailing List
http://www.openwall.com/lists/oss-security/2023/12/19/5
Mailing List
http://www.openwall.com/lists/oss-security/2023/12/20/3
Mailing List Mitigation
http://www.openwall.com/lists/oss-security/2024/03/06/3
Mailing List
http://www.openwall.com/lists/oss-security/2024/04/17/8
Mailing List
https://access.redhat.com/security/cve/cve-2023-48795
Third Party Advisory
https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integr...
Press/Media Coverage
https://bugs.gentoo.org/920280
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1217950
Issue Tracking
https://crates.io/crates/thrussh/versions
Release Notes
https://filezilla-project.org/versions.php
Release Notes
https://forum.netgate.com/topic/184941/terrapin-ssh-attack
Issue Tracking
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273...
Patch
https://github.com/NixOS/nixpkgs/pull/275249
Release Notes
https://github.com/PowerShell/Win32-OpenSSH/issues/2189
Issue Tracking
https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta
Release Notes
https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4a...
Patch
https://github.com/TeraTermProject/teraterm/releases/tag/v5.1
Release Notes
https://github.com/advisories/GHSA-45x7-px36-x8w8
Third Party Advisory
https://github.com/apache/mina-sshd/issues/445
Issue Tracking
https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa2...
Patch
https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22
Third Party Advisory
https://github.com/cyd01/KiTTY/issues/520
Issue Tracking
https://github.com/drakkan/sftpgo/releases/tag/v2.5.6
Release Notes
https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/l...
Patch
https://github.com/erlang/otp/releases/tag/OTP-26.2.1
Release Notes
https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
Patch
https://github.com/hierynomus/sshj/issues/916
Issue Tracking
https://github.com/janmojzis/tinyssh/issues/81
Issue Tracking
https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df8...
Patch
https://github.com/libssh2/libssh2/pull/1291
Mitigation
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd...
Patch
https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
Patch
https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15
Product
https://github.com/mwiede/jsch/issues/457
Issue Tracking
https://github.com/mwiede/jsch/pull/461
Release Notes
https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33...
Patch
https://github.com/openssh/openssh-portable/commits/master
Patch
https://github.com/paramiko/paramiko/issues/2337
Issue Tracking
https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397...
Release Notes
https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad...
Release Notes
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
Release Notes
https://github.com/proftpd/proftpd/issues/456
Issue Tracking
https://github.com/rapier1/hpn-ssh/releases
Release Notes
https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
Release Notes
https://github.com/ronf/asyncssh/tags
Release Notes
https://github.com/ssh-mitm/ssh-mitm/issues/165
Issue Tracking
https://github.com/warp-tech/russh/releases/tag/v0.40.2
Release Notes
https://gitlab.com/libssh/libssh-mirror/-/tags
Release Notes
https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
Mailing List
https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg
Mailing List
https://help.panic.com/releasenotes/transmit5/
Release Notes
https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerabilit...
Press/Media Coverage
https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
Mailing List
https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://matt.ucc.asn.au/dropbear/CHANGES
Release Notes
https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL...
Patch
https://news.ycombinator.com/item?id=38684904
Issue Tracking
https://news.ycombinator.com/item?id=38685286
Issue Tracking
https://news.ycombinator.com/item?id=38732005
Issue Tracking
https://nova.app/releases/#v11.8
Release Notes
https://oryx-embedded.com/download/#changelog
Release Notes
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002
Third Party Advisory
https://roumenpetrov.info/secsh/#news20231220
Release Notes
https://security-tracker.debian.org/tracker/CVE-2023-48795
Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/libssh2
Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg
Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/trilead-ssh2
Issue Tracking
https://security.gentoo.org/glsa/202312-16
Third Party Advisory
https://security.gentoo.org/glsa/202312-17
Third Party Advisory
https://security.netapp.com/advisory/ntap-20240105-0004/
Third Party Advisory
https://support.apple.com/kb/HT214084
Third Party Advisory
https://thorntech.com/cve-2023-48795-and-sftp-gateway/
Third Party Advisory
https://twitter.com/TrueSkrillor/status/1736774389725565005
Press/Media Coverage
https://ubuntu.com/security/CVE-2023-48795
Vendor Advisory
https://winscp.net/eng/docs/history#6.2.2
Release Notes
https://www.bitvise.com/ssh-client-version-history#933
Release Notes
https://www.bitvise.com/ssh-server-version-history
Release Notes
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
Release Notes
https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
Release Notes
https://www.debian.org/security/2023/dsa-5586
Issue Tracking
https://www.debian.org/security/2023/dsa-5588
Issue Tracking
https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc
Release Notes
https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#...
Vendor Advisory
https://www.netsarang.com/en/xshell-update-history/
Release Notes
https://www.openssh.com/openbsd.html
Release Notes
https://www.openssh.com/txt/release-9.6
Release Notes
https://www.openwall.com/lists/oss-security/2023/12/18/2
Mailing List
https://www.openwall.com/lists/oss-security/2023/12/20/3
Mailing List Mitigation
https://www.paramiko.org/changelog.html
Release Notes
https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_c...
Issue Tracking
https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka...
Press/Media Coverage
https://www.terrapin-attack.com
Exploit
https://www.theregister.com/2023/12/20/terrapin_attack_ssh
Press/Media Coverage
https://www.vandyke.com/products/securecrt/history.txt
Release Notes

cve@mitre.org Patch Exploit

http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening...
Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2024/Mar/21
Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/12/18/3
Mailing List
http://www.openwall.com/lists/oss-security/2023/12/19/5
Mailing List
http://www.openwall.com/lists/oss-security/2023/12/20/3
Mailing List Mitigation
http://www.openwall.com/lists/oss-security/2024/03/06/3
Mailing List
http://www.openwall.com/lists/oss-security/2024/04/17/8
Mailing List
https://access.redhat.com/security/cve/cve-2023-48795
Third Party Advisory
https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integr...
Press/Media Coverage
https://bugs.gentoo.org/920280
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2254210
Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1217950
Issue Tracking
https://crates.io/crates/thrussh/versions
Release Notes
https://filezilla-project.org/versions.php
Release Notes
https://forum.netgate.com/topic/184941/terrapin-ssh-attack
Issue Tracking
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273...
Patch
https://github.com/NixOS/nixpkgs/pull/275249
Release Notes
https://github.com/PowerShell/Win32-OpenSSH/issues/2189
Issue Tracking
https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta
Release Notes
https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4a...
Patch
https://github.com/TeraTermProject/teraterm/releases/tag/v5.1
Release Notes
https://github.com/advisories/GHSA-45x7-px36-x8w8
Third Party Advisory
https://github.com/apache/mina-sshd/issues/445
Issue Tracking
https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa2...
Patch
https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22
Third Party Advisory
https://github.com/cyd01/KiTTY/issues/520
Issue Tracking
https://github.com/drakkan/sftpgo/releases/tag/v2.5.6
Release Notes
https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/l...
Patch
https://github.com/erlang/otp/releases/tag/OTP-26.2.1
Release Notes
https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
Patch
https://github.com/hierynomus/sshj/issues/916
Issue Tracking
https://github.com/janmojzis/tinyssh/issues/81
Issue Tracking
https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df8...
Patch
https://github.com/libssh2/libssh2/pull/1291
Mitigation
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd...
Patch
https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
Patch
https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15
Product
https://github.com/mwiede/jsch/issues/457
Issue Tracking
https://github.com/mwiede/jsch/pull/461
Release Notes
https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33...
Patch
https://github.com/openssh/openssh-portable/commits/master
Patch
https://github.com/paramiko/paramiko/issues/2337
Issue Tracking
https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397...
Release Notes
https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad...
Release Notes
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
Release Notes
https://github.com/proftpd/proftpd/issues/456
Issue Tracking
https://github.com/rapier1/hpn-ssh/releases
Release Notes
https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
Release Notes
https://github.com/ronf/asyncssh/tags
Release Notes
https://github.com/ssh-mitm/ssh-mitm/issues/165
Issue Tracking
https://github.com/warp-tech/russh/releases/tag/v0.40.2
Release Notes
https://gitlab.com/libssh/libssh-mirror/-/tags
Release Notes
https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
Mailing List
https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg
Mailing List
https://help.panic.com/releasenotes/transmit5/
Release Notes
https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerabilit...
Press/Media Coverage
https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
Mailing List
https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html
Mailing List Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora...
Mailing List Third Party Advisory
https://matt.ucc.asn.au/dropbear/CHANGES
Release Notes
https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL...
Patch
https://news.ycombinator.com/item?id=38684904
Issue Tracking
https://news.ycombinator.com/item?id=38685286
Issue Tracking
https://news.ycombinator.com/item?id=38732005
Issue Tracking
https://nova.app/releases/#v11.8
Release Notes
https://oryx-embedded.com/download/#changelog
Release Notes
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002
Third Party Advisory
https://roumenpetrov.info/secsh/#news20231220
Release Notes
https://security-tracker.debian.org/tracker/CVE-2023-48795
Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/libssh2
Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg
Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/trilead-ssh2
Issue Tracking
https://security.gentoo.org/glsa/202312-16
Third Party Advisory
https://security.gentoo.org/glsa/202312-17
Third Party Advisory
https://security.netapp.com/advisory/ntap-20240105-0004/
Third Party Advisory
https://support.apple.com/kb/HT214084
Third Party Advisory
https://thorntech.com/cve-2023-48795-and-sftp-gateway/
Third Party Advisory
https://twitter.com/TrueSkrillor/status/1736774389725565005
Press/Media Coverage
https://ubuntu.com/security/CVE-2023-48795
Vendor Advisory
https://winscp.net/eng/docs/history#6.2.2
Release Notes
https://www.bitvise.com/ssh-client-version-history#933
Release Notes
https://www.bitvise.com/ssh-server-version-history
Release Notes
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
Release Notes
https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
Release Notes
https://www.debian.org/security/2023/dsa-5586
Issue Tracking
https://www.debian.org/security/2023/dsa-5588
Issue Tracking
https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc
Release Notes
https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#...
Vendor Advisory
https://www.netsarang.com/en/xshell-update-history/
Release Notes
https://www.openssh.com/openbsd.html
Release Notes
https://www.openssh.com/txt/release-9.6
Release Notes
https://www.openwall.com/lists/oss-security/2023/12/18/2
Mailing List
https://www.openwall.com/lists/oss-security/2023/12/20/3
Mailing List Mitigation
https://www.paramiko.org/changelog.html
Release Notes
https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_c...
Issue Tracking
https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka...
Press/Media Coverage
https://www.terrapin-attack.com
Exploit
https://www.theregister.com/2023/12/20/terrapin_attack_ssh
Press/Media Coverage
https://www.vandyke.com/products/securecrt/history.txt
Release Notes


 

CPE

cpe start end
Configuration 1
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* < 9.6
Configuration 2
cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:* < 0.80
Configuration 3
cpe:2.3:a:filezilla-project:filezilla_client:*:*:*:*:*:*:*:* < 3.66.4
Configuration 4
cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:* <= 11.1.0
Configuration 5
AND
  OR
  cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
  OR
   cpe:2.3:a:panic:transmit_5:*:*:*:*:*:*:*:* < 5.10.4
Configuration 6
AND
  OR
  cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
  OR
   cpe:2.3:a:panic:nova:*:*:*:*:*:*:*:* < 11.8
Configuration 7
cpe:2.3:a:roumenpetrov:pkixssh:*:*:*:*:*:*:*:* < 14.4
Configuration 8
cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:* < 6.2.2
Configuration 9
cpe:2.3:a:bitvise:ssh_client:*:*:*:*:*:*:*:* < 9.33
Configuration 10
cpe:2.3:a:bitvise:ssh_server:*:*:*:*:*:*:*:* < 9.32
Configuration 11
cpe:2.3:o:lancom-systems:lcos:*:*:*:*:*:*:*:* <= 3.66.4
Configuration 12
cpe:2.3:o:lancom-systems:lcos_fx:-:*:*:*:*:*:*:*
Configuration 13
cpe:2.3:o:lancom-systems:lcos_lx:-:*:*:*:*:*:*:*
Configuration 14
cpe:2.3:o:lancom-systems:lcos_sx:4.20:*:*:*:*:*:*:*
cpe:2.3:o:lancom-systems:lcos_sx:5.20:*:*:*:*:*:*:*
Configuration 15
cpe:2.3:o:lancom-systems:lanconfig:-:*:*:*:*:*:*:*
Configuration 16
cpe:2.3:a:vandyke:securecrt:*:*:*:*:*:*:*:* < 9.4.3
Configuration 17
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:* < 0.10.6
Configuration 18
cpe:2.3:a:net-ssh:net-ssh:7.2.0:*:*:*:*:ruby:*:*
Configuration 19
cpe:2.3:a:ssh2_project:ssh2:*:*:*:*:*:node.js:*:* <= 1.11.0
Configuration 20
cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:* <= 1.3.8b
Configuration 21
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:* <= 12.4
Configuration 22
cpe:2.3:a:crates:thrussh:*:*:*:*:*:*:*:* < 0.35.1
Configuration 23
cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:* <= 5.1
Configuration 24
cpe:2.3:a:oryx-embedded:cyclone_ssh:*:*:*:*:*:*:*:* < 2.3.4
Configuration 25
cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:* <= 10.6.0
Configuration 26
cpe:2.3:a:netsarang:xshell_7:*:*:*:*:*:*:*:* < build__0144
Configuration 27
cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:* < 3.4.0
Configuration 28
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
Configuration 29
cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*
cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*
Configuration 30
cpe:2.3:a:redhat:ceph_storage:6.0:*:*:*:*:*:*:*
Configuration 31
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
Configuration 32
cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:*
Configuration 33
cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*
Configuration 34
cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:*
Configuration 35
cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:*
Configuration 36
cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*
Configuration 37
cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:*
Configuration 38
cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*
Configuration 39
cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*
Configuration 40
cpe:2.3:a:redhat:discovery:-:*:*:*:*:*:*:*
Configuration 41
cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:*
Configuration 42
cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:*
Configuration 43
cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*
Configuration 44
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*
Configuration 45
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
Configuration 46
cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:*
Configuration 47
cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:* < 0.17.0
Configuration 48
cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:* < 0.40.2
Configuration 49
cpe:2.3:a:sftpgo_project:sftpgo:*:*:*:*:*:*:*:* < 2.5.6
Configuration 50
cpe:2.3:a:erlang:erlang/otp:*:*:*:*:*:*:*:* < 26.2.1
Configuration 51
cpe:2.3:a:matez:jsch:*:*:*:*:*:*:*:* < 0.2.15
Configuration 52
cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:* < 1.11.1
Configuration 53
cpe:2.3:a:asyncssh_project:asyncssh:*:*:*:*:*:*:*:* < 2.14.2
Configuration 54
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:* < 2022.83
Configuration 55
cpe:2.3:a:jadaptive:maverick_synergy_java_ssh_api:*:*:*:*:*:*:*:* < 3.1.0-snapshot
Configuration 56
cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:* < 5.11
Configuration 57
cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:* < 3.4.6
Configuration 58
cpe:2.3:a:netgate:pfsense_plus:*:*:*:*:*:*:*:* <= 23.09.1
Configuration 59
cpe:2.3:a:netgate:pfsense_ce:*:*:*:*:*:*:*:* <= 2.7.2
Configuration 60
cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:* < 10.6.0
Configuration 61
cpe:2.3:a:connectbot:sshlib:*:*:*:*:*:*:*:* < 2.2.22
Configuration 62
cpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:* <= 2.11.0
Configuration 63
cpe:2.3:a:apache:sshj:*:*:*:*:*:*:*:* <= 0.37.0
Configuration 64
cpe:2.3:a:tinyssh:tinyssh:*:*:*:*:*:*:*:* <= 20230101
Configuration 65
cpe:2.3:a:trilead:ssh2:6401:*:*:*:*:*:*:*
Configuration 66
cpe:2.3:a:9bis:kitty:*:*:*:*:*:*:*:* <= 0.76.1.13
Configuration 67
AND
   cpe:2.3:a:gentoo:security:-:*:*:*:*:*:*:*
  Running on/with
  cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*
Configuration 68
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
Configuration 69
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Configuration 70
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* >= 14.0 < 14.4


REMEDIATION


Patch

Url
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273...
https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4a...
https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa2...
https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/l...
https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df8...
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd...
https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33...
https://github.com/openssh/openssh-portable/commits/master
https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL...
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273...
https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4a...
https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa2...
https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/l...
https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df8...
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd...
https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33...
https://github.com/openssh/openssh-portable/commits/master
https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL...


EXPLOITS


Exploit-db.com

id description date
No known exploits

POC Github

Url
No known exploits

Other Nist (github, ...)

Url
https://www.terrapin-attack.com
https://www.terrapin-attack.com


CAPEC


Common Attack Pattern Enumerations and Classifications

id description severity
145 Checksum Spoofing
Medium
463 Padding Oracle Crypto Attack
High
75 Manipulating Writeable Configuration Files
Very High