CVE-2023-25136
CVE-2023-25136
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible."
CVSS 6.5 · Media · EPSS 89,8% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system · network
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
openssh Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.2p1-1
Actualiza a 1:9.2p1-1
openssh Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.2p1-1
Actualiza a 1:9.2p1-1
openssh Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:9.2p1-1
Actualiza a 1:9.2p1-1
Fuentes originales
- https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/017_sshd.patch.sig
- https://www.openwall.com/lists/oss-security/2023/02/02/2
- https://bugzilla.mindrot.org/show_bug.cgi?id=3522
- https://github.com/openssh/openssh-portable/commit/486c4dc3b83b4b67d663fb0fa62bc24138ec3946
- https://jfrog.com/blog/openssh-pre-auth-double-free-cve-2023-25136-writeup-and-proof-of-concept/
- https://news.ycombinator.com/item?id=34711565
- http://www.openwall.com/lists/oss-security/2023/02/13/1
- http://www.openwall.com/lists/oss-security/2023/02/22/1
- http://www.openwall.com/lists/oss-security/2023/02/22/2
- http://www.openwall.com/lists/oss-security/2023/02/23/3
- http://www.openwall.com/lists/oss-security/2023/03/06/1
- http://www.openwall.com/lists/oss-security/2023/03/09/2
- https://security.netapp.com/advisory/ntap-20230309-0003/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7LKQDFZWKYHQ65TBSH2X2HJQ4V2THS3/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGAUIXJ3TEKCRKVWFQ6GDAGQFTIIGQQP/
- https://security.gentoo.org/glsa/202307-01
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-25136