CVE-2023-46446
An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."
- Update to 2.5.0-1ubuntu0.1
Published Updated
PatchFirst · Latest vulnerabilities
python-asyncssh vulnerabilities
Vulnerabilities published for python-asyncssh in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
CVE-2023-46445
An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."
- Update to 2.5.0-1ubuntu0.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.