Read the docs
TI-2023-26623 Aliases CVE-2023-48795GHSA-45x7-px36-x8w8

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6…

Priority HIGH 70CWE-354Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
Partial Red Hat: 39 fixed, 23 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-345.

Summary

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in [email protected] and (if CBC is used) the [email protected] MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.93547 99th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix Partial russh (crates.io): 0.40.2golang.org/x/crypto (Go): 0.17.0, 0.0.0-20231218163308-9d2ee975ef9f+1 more productRed Hat: 63 advisoriesRed Hat: 39 fixed, 23 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—russh (crates.io)before 0.40.20.40.2Patch availableGHSA-45x7-px36-x8w8
—golang.org/x/crypto (Go)0.1.0 to before 0.17.00.17.0Patch availableGHSA-45x7-px36-x8w8
—paramiko (PyPI)2.5.0 to before 3.4.03.4.0Patch availableGHSA-45x7-px36-x8w8
—golang.org/x/crypto (Go)before 0.0.0-20231218163308-9d2ee975ef9f0.0.0-20231218163308-9d2ee975ef9fPatch availableGHSA-45x7-px36-x8w8
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • russh (crates.io) Vendor— Affected before 0.40.2 Fixed in 0.40.2 Patch available GHSA-45x7-px36-x8w8
  • golang.org/x/crypto (Go) Vendor— Affected 0.1.0 to before 0.17.0 Fixed in 0.17.0 Patch available GHSA-45x7-px36-x8w8
  • paramiko (PyPI) Vendor— Affected 2.5.0 to before 3.4.0 Fixed in 3.4.0 Patch available GHSA-45x7-px36-x8w8
  • golang.org/x/crypto (Go) Vendor— Affected before 0.0.0-20231218163308-9d2ee975ef9f Fixed in 0.0.0-20231218163308-9d2ee975ef9f Patch available GHSA-45x7-px36-x8w8

CPE configurations NVD · 77

CPEVersionsRoleVendor
cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*before 9.6VulnerableOpenBSD
cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*before 0.80VulnerablePuTTY
cpe:2.3:a:filezilla-project:filezilla_client:*:*:*:*:*:*:*:*before 3.66.4VulnerableFilezilla-Project
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*not specified by NVDRunning onApple
cpe:2.3:a:panic:transmit_5:*:*:*:*:*:*:*:*before 5.10.4VulnerablePanic
cpe:2.3:a:panic:nova:*:*:*:*:*:*:*:*before 11.8VulnerablePanic
cpe:2.3:a:roumenpetrov:pkixssh:*:*:*:*:*:*:*:*before 14.4VulnerableRoumenpetrov
cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*before 6.2.2VulnerableWinscp
cpe:2.3:a:bitvise:ssh_client:*:*:*:*:*:*:*:*before 9.33VulnerableBitvise
cpe:2.3:a:bitvise:ssh_server:*:*:*:*:*:*:*:*before 9.32VulnerableBitvise
  • cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:* Versions before 9.6 Vulnerable ·OpenBSD
  • cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:* Versions before 0.80 Vulnerable ·PuTTY
  • cpe:2.3:a:filezilla-project:filezilla_client:*:*:*:*:*:*:*:* Versions before 3.66.4 Vulnerable ·Filezilla-Project
  • cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
  • cpe:2.3:a:panic:transmit_5:*:*:*:*:*:*:*:* Versions before 5.10.4 Vulnerable ·Panic
  • cpe:2.3:a:panic:nova:*:*:*:*:*:*:*:* Versions before 11.8 Vulnerable ·Panic
  • cpe:2.3:a:roumenpetrov:pkixssh:*:*:*:*:*:*:*:* Versions before 14.4 Vulnerable ·Roumenpetrov
  • cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:* Versions before 6.2.2 Vulnerable ·Winscp
  • cpe:2.3:a:bitvise:ssh_client:*:*:*:*:*:*:*:* Versions before 9.33 Vulnerable ·Bitvise
  • cpe:2.3:a:bitvise:ssh_server:*:*:*:*:*:*:*:* Versions before 9.32 Vulnerable ·Bitvise
Show 67 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:lancom-systems:lcos:*:*:*:*:*:*:*:*up to 3.66.4VulnerableLancom-systems
cpe:2.3:o:lancom-systems:lcos_fx:-:*:*:*:*:*:*:*not specified by NVDVulnerableLancom-systems
cpe:2.3:o:lancom-systems:lcos_lx:-:*:*:*:*:*:*:*not specified by NVDVulnerableLancom-systems
cpe:2.3:o:lancom-systems:lcos_sx:4.20:*:*:*:*:*:*:*4.20VulnerableLancom-systems
cpe:2.3:o:lancom-systems:lcos_sx:5.20:*:*:*:*:*:*:*5.20VulnerableLancom-systems
cpe:2.3:o:lancom-systems:lanconfig:-:*:*:*:*:*:*:*not specified by NVDVulnerableLancom-systems
cpe:2.3:a:vandyke:securecrt:*:*:*:*:*:*:*:*before 9.4.3VulnerableVandyke
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*before 0.10.6Vulnerablelibssh
cpe:2.3:a:net-ssh:net-ssh:7.2.0:*:*:*:*:ruby:*:*7.2.0VulnerableNet-ssh
cpe:2.3:a:ssh2_project:ssh2:*:*:*:*:*:node.js:*:*up to 1.11.0VulnerableSsh2 Project
cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*up to 1.3.8bVulnerableProFTPD
cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*up to 12.4VulnerableFreeBSD
cpe:2.3:a:crates:thrussh:*:*:*:*:*:*:*:*before 0.35.1VulnerableCrates
cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:*up to 5.1VulnerableTeraTerm Project
cpe:2.3:a:oryx-embedded:cyclone_ssh:*:*:*:*:*:*:*:*before 2.3.4VulnerableOryx-embedded
cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*up to 10.6.0VulnerableCrushFTP
cpe:2.3:a:netsarang:xshell_7:*:*:*:*:*:*:*:*before build__0144VulnerableNetSarang
cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*before 3.4.0VulnerableParamiko
cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*16.1VulnerableRed Hat
cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*16.2VulnerableRed Hat
cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*17.1VulnerableRed Hat
cpe:2.3:a:redhat:ceph_storage:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*4VulnerableRed Hat
cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:a:redhat:discovery:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:*before 0.17.0VulnerableGo standard library
cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:*before 0.40.2VulnerableRussh Project
cpe:2.3:a:sftpgo_project:sftpgo:*:*:*:*:*:*:*:*before 2.5.6Vulnerabledrakkan
cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*before 22.3.4.27; 23.0 to before 23.3.4.20; 24.0 to before 24.3.4.15; 25.0 to before 25.3.2.8; 26.0 to before 26.2.1VulnerableErlang
cpe:2.3:a:matez:jsch:*:*:*:*:*:*:*:*before 0.2.15VulnerableMatez
cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*before 1.11.1VulnerableThe libssh2 Project
cpe:2.3:a:asyncssh_project:asyncssh:*:*:*:*:*:*:*:*before 2.14.2VulnerableAsyncssh Project
cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*before 2022.83VulnerableDropbear SSH Project
cpe:2.3:a:jadaptive:maverick_synergy_java_ssh_api:*:*:*:*:*:*:*:*before 3.1.0-snapshotVulnerableJadaptive
cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*before 4.9.1.5; 4.10 to before 4.11.1.7; 4.12 to before 4.13.2.4; 4.14 to before 4.15.3.1; 5.0 to before 5.1.1VulnerableSSH
cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:*before 3.4.6VulnerableThorntech
cpe:2.3:a:netgate:pfsense_plus:*:*:*:*:*:*:*:*up to 23.09.1VulnerableNetgate
cpe:2.3:a:netgate:pfsense_ce:*:*:*:*:*:*:*:*up to 2.7.2VulnerableNetgate
cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*before 10.6.0VulnerableCrushFTP
cpe:2.3:a:connectbot:sshlib:*:*:*:*:*:*:*:*before 2.2.22Vulnerableconnectbot
cpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:*up to 2.11.0VulnerableApache
cpe:2.3:a:apache:sshj:*:*:*:*:*:*:*:*up to 0.37.0VulnerableApache
cpe:2.3:a:tinyssh:tinyssh:*:*:*:*:*:*:*:*up to 20230101VulnerableTinyssh
cpe:2.3:a:trilead:ssh2:6401:*:*:*:*:*:*:*6401VulnerableTrilead
cpe:2.3:a:9bis:kitty:*:*:*:*:*:*:*:*up to 0.76.1.13Vulnerable9bis
cpe:2.3:a:gentoo:security:-:*:*:*:*:*:*:*not specified by NVDVulnerablegentoo
cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*not specified by NVDRunning onDebian
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*38VulnerableFedoraproject
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*39VulnerableFedoraproject
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*14.0 to before 14.4VulnerableApple
  • cpe:2.3:o:lancom-systems:lcos:*:*:*:*:*:*:*:* Versions up to 3.66.4 Vulnerable ·Lancom-systems
  • cpe:2.3:o:lancom-systems:lcos_fx:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lancom-systems
  • cpe:2.3:o:lancom-systems:lcos_lx:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lancom-systems
  • cpe:2.3:o:lancom-systems:lcos_sx:4.20:*:*:*:*:*:*:* Versions 4.20 Vulnerable ·Lancom-systems
  • cpe:2.3:o:lancom-systems:lcos_sx:5.20:*:*:*:*:*:*:* Versions 5.20 Vulnerable ·Lancom-systems
  • cpe:2.3:o:lancom-systems:lanconfig:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lancom-systems
  • cpe:2.3:a:vandyke:securecrt:*:*:*:*:*:*:*:* Versions before 9.4.3 Vulnerable ·Vandyke
  • cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:* Versions before 0.10.6 Vulnerable ·libssh
  • cpe:2.3:a:net-ssh:net-ssh:7.2.0:*:*:*:*:ruby:*:* Versions 7.2.0 Vulnerable ·Net-ssh
  • cpe:2.3:a:ssh2_project:ssh2:*:*:*:*:*:node.js:*:* Versions up to 1.11.0 Vulnerable ·Ssh2 Project
  • cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:* Versions up to 1.3.8b Vulnerable ·ProFTPD
  • cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:* Versions up to 12.4 Vulnerable ·FreeBSD
  • cpe:2.3:a:crates:thrussh:*:*:*:*:*:*:*:* Versions before 0.35.1 Vulnerable ·Crates
  • cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:* Versions up to 5.1 Vulnerable ·TeraTerm Project
  • cpe:2.3:a:oryx-embedded:cyclone_ssh:*:*:*:*:*:*:*:* Versions before 2.3.4 Vulnerable ·Oryx-embedded
  • cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:* Versions up to 10.6.0 Vulnerable ·CrushFTP
  • cpe:2.3:a:netsarang:xshell_7:*:*:*:*:*:*:*:* Versions before build__0144 Vulnerable ·NetSarang
  • cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:* Versions before 3.4.0 Vulnerable ·Paramiko
  • cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:* Versions 16.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:* Versions 16.2 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:* Versions 17.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:ceph_storage:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:* Versions 4 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:discovery:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:* Versions before 0.17.0 Vulnerable ·Go standard library
  • cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:* Versions before 0.40.2 Vulnerable ·Russh Project
  • cpe:2.3:a:sftpgo_project:sftpgo:*:*:*:*:*:*:*:* Versions before 2.5.6 Vulnerable ·drakkan
  • cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:* Versions before 22.3.4.27; 23.0 to before 23.3.4.20; 24.0 to before 24.3.4.15; 25.0 to before 25.3.2.8; 26.0 to before 26.2.1 Vulnerable ·Erlang
  • cpe:2.3:a:matez:jsch:*:*:*:*:*:*:*:* Versions before 0.2.15 Vulnerable ·Matez
  • cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:* Versions before 1.11.1 Vulnerable ·The libssh2 Project
  • cpe:2.3:a:asyncssh_project:asyncssh:*:*:*:*:*:*:*:* Versions before 2.14.2 Vulnerable ·Asyncssh Project
  • cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:* Versions before 2022.83 Vulnerable ·Dropbear SSH Project
  • cpe:2.3:a:jadaptive:maverick_synergy_java_ssh_api:*:*:*:*:*:*:*:* Versions before 3.1.0-snapshot Vulnerable ·Jadaptive
  • cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:* Versions before 4.9.1.5; 4.10 to before 4.11.1.7; 4.12 to before 4.13.2.4; 4.14 to before 4.15.3.1; 5.0 to before 5.1.1 Vulnerable ·SSH
  • cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:* Versions before 3.4.6 Vulnerable ·Thorntech
  • cpe:2.3:a:netgate:pfsense_plus:*:*:*:*:*:*:*:* Versions up to 23.09.1 Vulnerable ·Netgate
  • cpe:2.3:a:netgate:pfsense_ce:*:*:*:*:*:*:*:* Versions up to 2.7.2 Vulnerable ·Netgate
  • cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:* Versions before 10.6.0 Vulnerable ·CrushFTP
  • cpe:2.3:a:connectbot:sshlib:*:*:*:*:*:*:*:* Versions before 2.2.22 Vulnerable ·connectbot
  • cpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:* Versions up to 2.11.0 Vulnerable ·Apache
  • cpe:2.3:a:apache:sshj:*:*:*:*:*:*:*:* Versions up to 0.37.0 Vulnerable ·Apache
  • cpe:2.3:a:tinyssh:tinyssh:*:*:*:*:*:*:*:* Versions up to 20230101 Vulnerable ·Tinyssh
  • cpe:2.3:a:trilead:ssh2:6401:*:*:*:*:*:*:* Versions 6401 Vulnerable ·Trilead
  • cpe:2.3:a:9bis:kitty:*:*:*:*:*:*:*:* Versions up to 0.76.1.13 Vulnerable ·9bis
  • cpe:2.3:a:gentoo:security:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·gentoo
  • cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Debian
  • cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* Versions 38 Vulnerable ·Fedoraproject
  • cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* Versions 39 Vulnerable ·Fedoraproject
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:* Versions 14.0 to before 14.4 Vulnerable ·Apple

Remediation

  • Fix · GHSA-45x7-px36-x8w8 russh (crates.io) Fixed in 0.40.2 Advisory →
  • Fix · GHSA-45x7-px36-x8w8 golang.org/x/crypto (Go) Fixed in 0.17.0 Advisory →
  • Fix · GHSA-45x7-px36-x8w8 paramiko (PyPI) Fixed in 3.4.0 Advisory →
  • Fix · GHSA-45x7-px36-x8w8 golang.org/x/crypto (Go) Fixed in 0.0.0-20231218163308-9d2ee975ef9f Advisory →

Red Hat 63 advisories

  • RHSA-2026:79243 Released 2026-10-08 · Red Hat rating Important
    Red Hat Ceph Storage
    • Red Hat Ceph Storage 8.1 registry.redhat.io/rhceph/grafana-rhel9, registry.redhat.io/rhceph/rhceph-8-rhel9
  • RHSA-2026:79101 Released 2026-10-08 · Red Hat rating Important
    Red Hat Ceph Storage 8.1 security and bug fix updates
    • Red Hat Ceph Storage 8.1 Tools ceph-2:19.2.1-423.el9cp, ceph-base-2:19.2.1-423.el9cp, ceph-common-2:19.2.1-423.el9cp +25
  • RHSA-2025:4664 Released 2025-05-07 · Red Hat rating Important
    Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates
    • Red Hat Ceph Storage 7.1 Tools ceph-2:18.2.1-329.el8cp, ceph-2:18.2.1-329.el9cp, ceph-base-2:18.2.1-329.el8cp +47
Show 60 more Red Hat advisories
  • RHSA-2024:8235 Released 2024-10-23 · Red Hat rating Important
    OpenShift Container Platform 4.14.39 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-cluster-baremetal-operator-rhel8, openshift4/ose-ibm-cloud-controller-manager-rhel8 +5
  • RHSA-2024:3718 Released 2024-10-01 · Red Hat rating Moderate
    OpenShift Container Platform 4.17.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2024:6406 Released 2024-09-11 · Red Hat rating Important
    OpenShift Container Platform 4.14.36 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:5433 Released 2024-08-22 · Red Hat rating Important
    OpenShift Container Platform 4.14.35 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:5432 Released 2024-08-21 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.35 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-ptp-rhel9
  • RHSA-2024:5438 Released 2024-08-21 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.28 packages and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-ptp-rhel9
  • RHSA-2024:5200 Released 2024-08-19 · Red Hat rating Important
    OpenShift Container Platform 4.12.63 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 openshift4/ose-cloud-credential-operator, openshift4/ose-cluster-image-registry-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +4
  • RHSA-2024:4960 Released 2024-08-07 · Red Hat rating Important
    OpenShift Container Platform 4.14.34 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-ebs-csi-driver-rhel8, openshift4/ose-cloud-credential-operator, openshift4/ose-ibm-vpc-block-csi-driver-operator-rhel8 +6
  • RHSA-2024:4959 Released 2024-08-07 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.34 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-efs-csi-driver-container-rhel8, openshift4/ose-sriov-network-webhook
  • RHSA-2024:4955 Released 2024-08-07 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.25 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/egress-router-cni-rhel8, rhcos
  • RHSA-2024:4613 Released 2024-07-24 · Red Hat rating Moderate
    OpenShift Container Platform 4.16.4 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/egress-router-cni-rhel9, openshift4/network-tools-rhel9, openshift4/ose-agent-installer-api-server-rhel9 +35
  • RHSA-2024:4662 Released 2024-07-18 · Red Hat rating Moderate
    OpenShift Virtualization 4.15.3 Images security update
    • CNV 4.15 for RHEL 9 container-native-virtualization/cluster-network-addons-operator-rhel9
  • RHSA-2024:4597 Released 2024-07-17 · Red Hat rating Important
    Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.15 jenkins-2-plugins-4.15.1718879538-1.el8, jenkins-2.440.3.1718879390-3.el8
  • RHSA-2024:4484 Released 2024-07-17 · Red Hat rating Important
    OpenShift Container Platform 4.13.45 bug fix and security update
    • Red Hat OpenShift Container Platform 4.13 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-olm-rukpak-rhel8, openshift4/ose-operator-lifecycle-manager +4
  • RHSA-2024:4479 Released 2024-07-17 · Red Hat rating Important
    OpenShift Container Platform 4.14.33 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-azure-disk-csi-driver-rhel8, openshift4/ose-cluster-image-registry-operator, rhcos
  • RHSA-2024:4329 Released 2024-07-11 · Red Hat rating Important
    OpenShift Container Platform 4.14.32 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-azure-cluster-api-controllers-rhel8, openshift4/ose-cluster-capi-operator-container-rhel8, openshift4/ose-cluster-capi-rhel8-operator +3
  • RHSA-2024:4151 Released 2024-07-02 · Red Hat rating Important
    OpenShift Container Platform 4.15.20 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-baremetal-installer-rhel8, openshift4/ose-installer, openshift4/ose-installer-artifacts +1
  • RHSA-2024:0041 Released 2024-06-27 · Red Hat rating Critical
    OpenShift Container Platform 4.16.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/aws-kms-encryption-provider-rhel9, openshift4/azure-kms-encryption-provider-rhel9, openshift4/cloud-network-config-controller-rhel9 +47
  • RHSA-2024:0040 Released 2024-06-27 · Red Hat rating Critical
    OpenShift Container Platform 4.16.0 security and extras update
    • Red Hat OpenShift Container Platform 4.16 openshift4/ose-ansible-operator, openshift4/ose-aws-efs-csi-driver-container-rhel9, openshift4/ose-cloud-event-proxy-rhel9 +11
  • RHSA-2024:4010 Released 2024-06-26 · Red Hat rating Important
    OpenShift Container Platform 4.14.31 security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-aws-cloud-controller-manager-rhel8, openshift4/ose-olm-rukpak-rhel8, openshift4/ose-operator-lifecycle-manager +4
  • RHSA-2024:3918 Released 2024-06-19 · Red Hat rating Moderate
    OpenShift Container Platform 4.14.30 packages and security update
    • Red Hat OpenShift Container Platform 4.14 podman-3:4.4.1-14.4.rhaos4.14.el8, podman-3:4.4.1-14.4.rhaos4.14.el9, podman-catatonit-3:4.4.1-14.4.rhaos4.14.el8 +10
  • RHSA-2024:3635 Released 2024-06-05 · Red Hat rating Important
    Red Hat Product OCP Tools 4.12 Openshift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.12 jenkins-2-plugins-4.12.1716445211-1.el8, jenkins-2.440.3.1716445200-3.el8
  • RHSA-2024:3634 Released 2024-06-05 · Red Hat rating Important
    Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.14 jenkins-2-plugins-4.14.1716388016-1.el8, jenkins-2.440.3.1716387933-3.el8
  • RHSA-2024:3636 Released 2024-06-05 · Red Hat rating Important
    Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update
    • OpenShift Developer Tools and Services for OCP 4.13 jenkins-2-plugins-4.13.1716445207-1.el8, jenkins-2.440.3.1716445150-3.el8
  • RHSA-2024:3479 Released 2024-05-29 · Red Hat rating Important
    Red Hat OpenStack Platform 16.2 director Operator container images security update
    • Red Hat OpenStack Platform 16.2 rhosp-rhel8/osp-director-agent, rhosp-rhel8/osp-director-downloader, rhosp-rhel8/osp-director-operator +1
  • RHSA-2024:2728 Released 2024-05-29 · Red Hat rating Important
    Red Hat OpenStack Platform 17.1 director Operator container images security update
    • Red Hat OpenStack Platform 17.1 rhosp-rhel9/osp-director-agent, rhosp-rhel9/osp-director-downloader, rhosp-rhel9/osp-director-operator +1
  • RHSA-2024:2768 Released 2024-05-22 · Red Hat rating Moderate
    Red Hat OpenStack Platform 17.1 (python-paramiko) security update
    • Red Hat OpenStack Platform 17.1 python-paramiko-2.11.0-2.el8ost, python3-paramiko-2.11.0-2.el8ost
  • RHSA-2024:2735 Released 2024-05-22 · Red Hat rating Moderate
    Red Hat OpenStack Platform 17.1 (python-paramiko) security update
    • Red Hat OpenStack Platform 17.1 python-paramiko-2.11.0-2.el9ost, python3-paramiko-2.11.0-2.el9ost
  • RHSA-2024:2988 Released 2024-05-22 · Red Hat rating Moderate
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.0-1.module+el8.10.0+21209+52deeb51.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+21209+52deeb51.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.0-1.module+el8.10.0+21209+52deeb51.s390x::container-tools:rhel8 +47
  • RHSA-2024:1859 Released 2024-04-16 · Red Hat rating Moderate
    OpenShift API for Data Protection (OADP) 1.3.1 security and bug fix update
    • 9Base-OADP-1.3 oadp/oadp-rhel9-operator, oadp/oadp-velero-plugin-for-csi-rhel9, oadp/oadp-velero-plugin-for-gcp-rhel9 +3
  • RHSA-2024:1674 Released 2024-04-04 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-activemq-artemis-2.16.0-18.redhat_00052.1.el7eap, eap7-activemq-artemis-cli-2.16.0-18.redhat_00052.1.el7eap, eap7-activemq-artemis-commons-2.16.0-18.redhat_00052.1.el7eap +47
  • RHSA-2024:1675 Released 2024-04-04 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 8 eap7-activemq-artemis-2.16.0-18.redhat_00052.1.el8eap, eap7-activemq-artemis-cli-2.16.0-18.redhat_00052.1.el8eap, eap7-activemq-artemis-commons-2.16.0-18.redhat_00052.1.el8eap +47
  • RHSA-2024:1676 Released 2024-04-04 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
    • Red Hat JBoss EAP 7.4 for RHEL 9 eap7-activemq-artemis-2.16.0-18.redhat_00052.1.el9eap, eap7-activemq-artemis-cli-2.16.0-18.redhat_00052.1.el9eap, eap7-activemq-artemis-commons-2.16.0-18.redhat_00052.1.el9eap +47
  • RHSA-2024:1677 Released 2024-04-04 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.4.16 Security update
    • Red Hat JBoss Enterprise Application Platform 7.4.16 io.undertow.undertow-core-2.2.30.SP1-redhat-00001.jar, org.apache.sshd.sshd-common-2.12.1.redhat-00001.jar, org.jberet.jberet-core-1.3.9.SP3-redhat-00001.jar
  • RHSA-2024:1557 Released 2024-03-28 · Red Hat rating Critical
    Errata Advisory for Red Hat OpenShift Builds 1.0.1
    • Builds for Red Hat OpenShift 1.0 openshift-builds/openshift-builds-controller-rhel8, openshift-builds/openshift-builds-git-cloner-rhel8, openshift-builds/openshift-builds-image-bundler-rhel8 +5
  • RHSA-2024:1383 Released 2024-03-19 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.15.0 security, enhancement, & bug fix update
    • RHODF 4.15 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-core-rhel9, odf4/mcg-operator-bundle +23
  • RHSA-2024:1210 Released 2024-03-13 · Red Hat rating Moderate
    OpenShift Container Platform 4.15.2 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/cloud-network-config-controller-rhel8, openshift4/driver-toolkit-rhel9, openshift4/egress-router-cni-rhel8 +47
  • RHSA-2024:1196 Released 2024-03-06 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 7.4 security update
    • Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-apache-sshd-2.12.1-1.redhat_00001.1.el7eap
    • Red Hat JBoss EAP 7.4 for RHEL 8 eap7-apache-sshd-2.12.1-1.redhat_00001.1.el8eap
    • Red Hat JBoss EAP 7.4 for RHEL 9 eap7-apache-sshd-2.12.1-1.redhat_00001.1.el9eap
  • RHSA-2024:1197 Released 2024-03-06 · Red Hat rating Low
    Red Hat JBoss Enterprise Application Platform 7.4 security update
    • Red Hat JBoss Enterprise Application Platform 7.4.16 org.apache.sshd.sshd-common-2.12.1.redhat-00001.jar, org.apache.sshd.sshd-core-2.12.1.redhat-00001.jar
  • RHSA-2024:1194 Released 2024-03-06 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 8.0.1 security update
    • EAP 8.0.1
  • RHSA-2024:1192 Released 2024-03-06 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 8.0.1 security update
    • Red Hat JBoss EAP 8.0 for RHEL 8 eap8-apache-sshd-2.12.0-1.redhat_00001.1.el8eap, eap8-eclipse-jgit-6.6.1.202309021850-1.r_redhat_00001.1.el8eap, eap8-log4j-2.19.0-2.redhat_00001.1.el8eap +12
  • RHSA-2024:1193 Released 2024-03-06 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 8.0.1 security update
    • Red Hat JBoss EAP 8.0 for RHEL 9 eap8-apache-sshd-2.12.0-1.redhat_00001.1.el9eap, eap8-eclipse-jgit-6.6.1.202309021850-1.r_redhat_00001.1.el9eap, eap8-log4j-2.19.0-2.redhat_00001.1.el9eap +12
  • RHSA-2024:1130 Released 2024-03-05 · Red Hat rating Moderate
    openssh security update
    • Red Hat Enterprise Linux AppStream (v. 9) openssh-askpass-8.7p1-34.el9_3.3, pam_ssh_agent_auth-0.10.4-5.34.el9_3.3
    • Red Hat Enterprise Linux BaseOS (v. 9) openssh-8.7p1-34.el9_3.3, openssh-clients-8.7p1-34.el9_3.3, openssh-keycat-8.7p1-34.el9_3.3 +1
  • RHSA-2024:1150 Released 2024-03-05 · Red Hat rating Moderate
    buildah security update
    • Red Hat Enterprise Linux AppStream (v. 9) buildah-1:1.31.4-1.el9_3, buildah-tests-1:1.31.4-1.el9_3
  • RHSA-2024:0766 Released 2024-02-28 · Red Hat rating Critical
    OpenShift Container Platform 4.15.0 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-aws-efs-csi-driver-container-rhel8, openshift4/ose-aws-efs-csi-driver-rhel8-operator, openshift4/ose-ptp-rhel9-operator
  • RHSA-2023:7201 Released 2024-02-27 · Red Hat rating Important
    OpenShift Container Platform 4.15.0 packages and security update
    • Red Hat OpenShift Container Platform 4.15 buildah-1:1.29.1-20.2.rhaos4.15.el8, buildah-1:1.29.1-20.2.rhaos4.15.el9, buildah-tests-1:1.29.1-20.2.rhaos4.15.el8 +37
  • RHSA-2023:7198 Released 2024-02-27 · Red Hat rating Critical
    OpenShift Container Platform 4.15.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/cloud-network-config-controller-rhel8, openshift4/egress-router-cni-rhel8, openshift4/kube-metrics-server-rhel8 +47
  • RHSA-2023:7197 Released 2024-02-27 · Red Hat rating Critical
    OpenShift Container Platform 4.15.0 security and extras update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-ansible-operator, openshift4/ose-clusterresourceoverride-rhel9, openshift4/ose-clusterresourceoverride-rhel9-operator +7
  • RHSA-2024:0954 Released 2024-02-27 · Red Hat rating Important
    Red Hat OpenShift for Windows Containers 10.15.0 security update
    • Red Hat OpenShift Container Platform 4.15 openshift4-wincw/windows-machine-config-operator-bundle, openshift4-wincw/windows-machine-config-rhel9-operator
  • RHSA-2024:0880 Released 2024-02-20 · Red Hat rating Critical
    Release of OpenShift Serverless Client kn 1.31.1 security update
    • Red Hat OpenShift Serverless 1.0 openshift-serverless-clients-1.10.0-6.el8
  • RHSA-2024:0843 Released 2024-02-15 · Red Hat rating Critical
    Release of OpenShift Serverless 1.31.1
    • Red Hat OpenShift Serverless 1.31 openshift-serverless-1-tech-preview/eventing-istio-controller-rhel8, openshift-serverless-1-tech-preview/knative-client-plugin-event-sender-rhel8, openshift-serverless-1-tech-preview/logic-swf-builder-rhel8 +37
  • RHSA-2024:0789 Released 2024-02-12 · Red Hat rating Important
    Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 release (RHBQ 3.2.10.Final)
    • RHBOAC camel-quarkus 3 (camel-4.0/quarkus-3.2)
  • RHSA-2024:0628 Released 2024-01-31 · Red Hat rating Moderate
    libssh security update
    • Red Hat Enterprise Linux AppStream (v. 8) libssh-devel-0.9.6-13.el8_9
    • Red Hat Enterprise Linux BaseOS (v. 8) libssh-0.9.6-13.el8_9, libssh-config-0.9.6-13.el8_9
  • RHSA-2024:0625 Released 2024-01-31 · Red Hat rating Moderate
    libssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) libssh-devel-0.9.6-13.el8_8
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) libssh-0.9.6-13.el8_8, libssh-config-0.9.6-13.el8_8
  • RHSA-2024:0606 Released 2024-01-30 · Red Hat rating Moderate
    openssh security update
    • Red Hat Enterprise Linux AppStream (v. 8) openssh-askpass-8.0p1-19.el8_9.2
    • Red Hat Enterprise Linux BaseOS (v. 8) openssh-8.0p1-19.el8_9.2, openssh-cavs-8.0p1-19.el8_9.2, openssh-clients-8.0p1-19.el8_9.2 +4
  • RHSA-2024:0594 Released 2024-01-30 · Red Hat rating Moderate
    openssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) openssh-askpass-8.0p1-19.el8_8.2
    • Red Hat Enterprise Linux BaseOS EUS (v.8.8) openssh-8.0p1-19.el8_8.2, openssh-cavs-8.0p1-19.el8_8.2, openssh-clients-8.0p1-19.el8_8.2 +4
  • RHSA-2024:0538 Released 2024-01-29 · Red Hat rating Moderate
    libssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) libssh-devel-0.9.6-4.el8_6
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) libssh-0.9.6-4.el8_6, libssh-config-0.9.6-4.el8_6
  • RHSA-2024:0499 Released 2024-01-25 · Red Hat rating Moderate
    libssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) libssh-devel-0.10.4-9.el9_2
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) libssh-0.10.4-9.el9_2, libssh-config-0.10.4-9.el9_2
  • RHSA-2024:0455 Released 2024-01-25 · Red Hat rating Moderate
    openssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) openssh-askpass-8.7p1-30.el9_2.3, pam_ssh_agent_auth-0.10.4-5.30.el9_2.3
    • Red Hat Enterprise Linux BaseOS EUS (v.9.2) openssh-8.7p1-30.el9_2.3, openssh-clients-8.7p1-30.el9_2.3, openssh-keycat-8.7p1-30.el9_2.3 +1
  • RHSA-2024:0429 Released 2024-01-25 · Red Hat rating Moderate
    openssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) openssh-askpass-8.0p1-15.el8_6.3
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) openssh-8.0p1-15.el8_6.3, openssh-cavs-8.0p1-15.el8_6.3, openssh-clients-8.0p1-15.el8_6.3 +4

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Migration Toolkit for ContainersAffectedNo fix planned: Will not fix
OpenShift Developer Tools and ServicesAffectedNo fix yet: Fix deferred
OpenShift PipelinesAffectedNo fix yet
Red Hat Advanced Cluster Security 3AffectedNo fix planned: Out of support scope
Red Hat Advanced Cluster Security 4AffectedNo fix yet
Red Hat Ceph Storage 6AffectedNo fix yet
Red Hat Ceph Storage 9AffectedNo fix yet
Red Hat Enterprise Linux 6AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat OpenShift Container Platform 3.11AffectedNo fix planned: Out of support scope
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Dev SpacesAffectedNo fix yet
Red Hat OpenShift GitOpsAffectedNo fix planned: Will not fix
Red Hat OpenShift Virtualization 4AffectedNo fix yet
Red Hat OpenStack Platform 16.1AffectedNo fix planned: Out of support scope
Red Hat OpenStack Platform 16.2AffectedNo fix planned: Will not fix
Red Hat OpenStack Platform 18.0AffectedNo fix yet
Red Hat Process Automation 7AffectedNo fix planned: Out of support scope
Red Hat Quay 3AffectedNo fix yet
Red Hat Storage 3AffectedNo fix planned: Out of support scope
Red Hat Virtualization 4AffectedNo fix planned: Will not fix
Red Hat build of QuarkusAffectedNo fix planned: Out of support scope
9Base-OADP-1.3Fixed RHSA-2024:1859
Builds for Red Hat OpenShift 1.0Fixed RHSA-2024:1557
CNV 4.15 for RHEL 9Fixed RHSA-2024:4662
EAP 8.0.1Fixed RHSA-2024:1194
OpenShift Developer Tools and Services for OCP 4.12Fixed RHSA-2024:3635
OpenShift Developer Tools and Services for OCP 4.13Fixed RHSA-2024:3636
OpenShift Developer Tools and Services for OCP 4.14Fixed RHSA-2024:3634
OpenShift Developer Tools and Services for OCP 4.15Fixed RHSA-2024:4597
RHBOAC camel-quarkus 3 (camel-4.0/quarkus-3.2)Fixed RHSA-2024:0789
RHODF 4.15 for RHEL 9Fixed RHSA-2024:1383
Red Hat Ceph Storage 7.1 ToolsFixed RHSA-2025:4664
Red Hat Ceph Storage 8.1Fixed RHSA-2026:79243
Red Hat Ceph Storage 8.1 ToolsFixed RHSA-2026:79101
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2024:0606, RHSA-2024:0628, RHSA-2024:2988
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2024:1130, RHSA-2024:1150
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:0429, RHSA-2024:0538
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2024:0594, RHSA-2024:0625
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2024:0455, RHSA-2024:0499
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2024:0606, RHSA-2024:0628
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2024:1130
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:0429, RHSA-2024:0538
Red Hat Enterprise Linux BaseOS EUS (v.8.8)Fixed RHSA-2024:0594, RHSA-2024:0625
Red Hat Enterprise Linux BaseOS EUS (v.9.2)Fixed RHSA-2024:0455, RHSA-2024:0499
Red Hat JBoss EAP 7.4 for RHEL 7 ServerFixed RHSA-2024:1196, RHSA-2024:1674
Red Hat JBoss EAP 7.4 for RHEL 8Fixed RHSA-2024:1196, RHSA-2024:1675
Red Hat JBoss EAP 7.4 for RHEL 9Fixed RHSA-2024:1196, RHSA-2024:1676
Red Hat JBoss EAP 8.0 for RHEL 8Fixed RHSA-2024:1192
Red Hat JBoss EAP 8.0 for RHEL 9Fixed RHSA-2024:1193
Red Hat JBoss Enterprise Application Platform 7.4.16Fixed RHSA-2024:1197
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2024:5200
Red Hat OpenShift Container Platform 4.13Fixed RHSA-2024:4484
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2024:3918, RHSA-2024:4010, RHSA-2024:4329, RHSA-2024:4479, RHSA-2024:4959, RHSA-2024:4960, RHSA-2024:5432, RHSA-2024:5433, RHSA-2024:6406, RHSA-2024:8235
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2023:7197, RHSA-2023:7198, RHSA-2023:7201, RHSA-2024:0766, RHSA-2024:0954, RHSA-2024:1210, RHSA-2024:4151, RHSA-2024:4955, RHSA-2024:5438
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2024:0040, RHSA-2024:0041, RHSA-2024:4613
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2024:3718
Red Hat OpenShift Serverless 1.0Fixed RHSA-2024:0880
Red Hat OpenShift Serverless 1.31Fixed RHSA-2024:0843
Red Hat OpenStack Platform 16.2Fixed RHSA-2024:3479
Red Hat OpenStack Platform 17.1Fixed RHSA-2024:2728, RHSA-2024:2735, RHSA-2024:2768
Not affected: 34 products
  • 9Base-OADP-1.3
  • CNV 4.15 for RHEL 9
  • Ironic content for Red Hat OpenShift Container Platform 4.15
  • OpenShift Service Mesh 2
  • Red Hat Advanced Cluster Security 4
  • Red Hat Ansible Automation Platform 2
  • Red Hat Build of Keycloak
  • Red Hat Ceph Storage 7.1 Tools
  • Red Hat Ceph Storage 8.1
  • Red Hat Discovery 1
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat JBoss EAP 7.4 for RHEL 7 Server
  • Red Hat JBoss EAP 7.4 for RHEL 8
  • Red Hat JBoss EAP 7.4 for RHEL 9
  • Red Hat JBoss Enterprise Application Platform 7.4.16
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.12
  • Red Hat OpenShift Container Platform 4.13
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenStack Platform 16.1
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Container Storage 4
  • Red Hat Openshift Data Foundation 4
  • Red Hat Satellite 6
  • Red Hat Single Sign-On 7
  • Red Hat Virtualization 4
  • cert-manager Operator for Red Hat OpenShift

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-48795
  2. 2026-10-03 Alias added: GHSA-45x7-px36-x8w8
  3. 2026-10-08 Fix available: Red Hat JBoss Enterprise Application Platform 7.4.16 · Red Hat
  4. 2026-10-09 Fix available: RHSA-2026:79101 · Red Hat
  5. 2026-10-09 Fix available: RHSA-2026:79243 · Red Hat
  6. 2026-10-09 Fix available: Red Hat Ceph Storage 8.1, Red Hat Ceph Storage 8.1 Tools · Red Hat

References

Exploit 3

Patch 11

Advisory 40

Other 118

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences