Orta CVSS 6.5 PoC var

CVE-2023-25136: Openssh: güvenlik açığı

Yayın: 3 Şubat 2023 09:15 · Güncelleme: 6 Kasım 2026 09:46

Açıklama (NVD)

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible."

Özet bilgiler

Ürün: Openbsd Openssh
CVSS v3.1: 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
EPSS: %89,79 (yüzdelik 100)
CWE: CWE-415
Yama: Mevcut

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
openbsd-openssh	9.1	9.1	—
fedoraproject-fedora	37	37	—
fedoraproject-fedora	38	38	—
netapp-ontap-select-deploy-administration-utility	—	—	—
netapp-a250-firmware	—	—	—
netapp-500f-firmware	—	—	—
netapp-c250-firmware	—	—	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları