CVE-2023-25136

Katalog CVE

CVSS 6.5 · Medium EPSS 89,7%

Kerentanan Double Free pada openbsd openssh, fedoraproject fedora +4 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible."

Rincian

Terbit di NVD

3 Februari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-415: Double Free

EPSS (30 hari)

89,7% peluang dieksploitasi; lebih tinggi dari 99,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/017_sshd.patch.sig patch · advisory vendor
• https://github.com/openssh/openssh-portable/commit/486c4dc3b83b4b67d663fb0fa62bc24138ec3946 patch · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/02/13/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/02/22/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/02/22/2 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/02/23/3 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/03/06/1 mailing list · advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/03/09/2 mailing list · advisory pihak ketiga
• https://bugzilla.mindrot.org/show_bug.cgi?id=3522 exploit · issue tracking · advisory pihak ketiga
• https://jfrog.com/blog/openssh-pre-auth-double-free-cve-2023-25136-writeup-and-proof-of-concept/ exploit · advisory pihak ketiga
• https://news.ycombinator.com/item?id=34711565 issue tracking · advisory pihak ketiga
• https://security.gentoo.org/glsa/202307-01 advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230309-0003/ advisory pihak ketiga
• https://www.openwall.com/lists/oss-security/2023/02/02/2 exploit · mailing list · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGAUIXJ3TEKCR...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7LKQDFZWKYHQ...