CVE-2023-51767

Katalog CVE

CVSS 7.0 · High EPSS 0,66%

Kerentanan pada openbsd openssh, fedoraproject fedora +1 lainnya. Skor CVSS 3.1 7.0 (High) menurut NVD.

Deskripsi (NVD)

OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses."

Rincian

Terbit di NVD

24 Desember 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.0 (High), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,66% peluang dieksploitasi; lebih tinggi dari 50,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2023-51767 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2255850 issue tracking · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20240125-0006/ advisory pihak ketiga
• https://ubuntu.com/security/CVE-2023-51767 advisory pihak ketiga
• https://arxiv.org/abs/2309.02545 deskripsi teknis
• https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77 product
• https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878 product
• https://www.openwall.com/lists/oss-security/2025/09/22/1
• http://www.openwall.com/lists/oss-security/2025/09/22/1
• http://www.openwall.com/lists/oss-security/2025/09/22/2
• http://www.openwall.com/lists/oss-security/2025/09/23/1
• http://www.openwall.com/lists/oss-security/2025/09/23/3
• http://www.openwall.com/lists/oss-security/2025/09/23/4
• http://www.openwall.com/lists/oss-security/2025/09/23/5
• http://www.openwall.com/lists/oss-security/2025/09/24/4
• http://www.openwall.com/lists/oss-security/2025/09/24/7
• http://www.openwall.com/lists/oss-security/2025/09/25/2
• http://www.openwall.com/lists/oss-security/2025/09/25/6
• http://www.openwall.com/lists/oss-security/2025/09/26/2
• http://www.openwall.com/lists/oss-security/2025/09/26/4
• http://www.openwall.com/lists/oss-security/2025/09/27/1
• http://www.openwall.com/lists/oss-security/2025/09/27/2
• http://www.openwall.com/lists/oss-security/2025/09/27/3
• http://www.openwall.com/lists/oss-security/2025/09/27/4
• http://www.openwall.com/lists/oss-security/2025/09/27/5