Yüksek CVSS 7

CVE-2023-51767: Openssh: güvenlik açığı

Yayın: 24 Aralık 2023 10:15 · Güncelleme: 6 Kasım 2026 09:48

Açıklama (NVD)

OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses."

Özet bilgiler

Ürün: Openbsd Openssh
CVSS v3.1: 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS: %0,66 (yüzdelik 52)
Yama: Yok / bilinmiyor

Etkilenen sürümler

Ürün	Başlangıç	Bitiş	Düzeltildi
openbsd-openssh	—	—	—
fedoraproject-fedora	39	39	—
redhat-enterprise-linux	8.0	8.0	—
redhat-enterprise-linux	9.0	9.0	—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları