{"id":"EUVD-2023-26860","enisaUuid":"650d56ff-e8d2-3d38-b72e-d192d86797d9","description":"libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_check` field of libgit2\u0027s `git_remote_callbacks` structure - if a certificate check callback is not set, libgit2 does not perform any certificate checking. This means that by default - without configuring a certificate check callback, clients will not perform validation on the server SSH keys and may be subject to a man-in-the-middle attack. Users are encouraged to upgrade to v1.4.5 or v1.5.1. Users unable to upgrade should ensure that all relevant certificates are manually checked.","datePublished":"Jan 20, 2023, 10:49:06 PM","dateUpdated":"Mar 10, 2025, 9:21:08 PM","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","references":"https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq\nhttps://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56\nhttps://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea\nhttps://github.com/libgit2/libgit2/releases/tag/v1.4.5\nhttps://github.com/libgit2/libgit2/releases/tag/v1.5.1\nhttps://www.libssh2.org\nhttp://www.openwall.com/lists/oss-security/2023/11/06/5\n","aliases":"CVE-2023-22742\n","assigner":"GitHub_M","epss":0.61,"enisaIdProduct":[{"id":"1d8aa1e4-177e-3b02-8b8b-d9f9fb3ded4f","product":{"name":"libgit2","vendor":{"name":"libgit2"}},"product_version":"\u003d 1.5.0"},{"id":"79b7c934-3dac-34a5-8dbc-6c61d52da461","product":{"name":"libgit2","vendor":{"name":"libgit2"}},"product_version":"\u003c 1.4.5"}],"enisaIdVendor":[{"id":"390c2ab4-bfe0-3e02-9be4-2ffa8a3f7893","vendor":{"name":"libgit2"}}],"enisaIdVulnerability":[{"id":"d7c55e58-f376-318e-a391-eab2bc8fd1b3","vulnerability":{"id":"CVE-2023-22742","description":"libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_check` field of libgit2\u0027s `git_remote_callbacks` structure - if a certificate check callback is not set, libgit2 does not perform any certificate checking. This means that by default - without configuring a certificate check callback, clients will not perform validation on the server SSH keys and may be subject to a man-in-the-middle attack. Users are encouraged to upgrade to v1.4.5 or v1.5.1. Users unable to upgrade should ensure that all relevant certificates are manually checked.","datePublished":"Jan 20, 2023, 10:49:06 PM","dateUpdated":"Mar 10, 2025, 9:21:08 PM","status":"PUBLISHED","baseScore":5.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N","references":"https://github.com/libgit2/libgit2/security/advisories/GHSA-8643-3wh5-rmjq\nhttps://github.com/libgit2/libgit2/commit/42e5db98b963ae503229c63e44e06e439df50e56\nhttps://github.com/libgit2/libgit2/commit/cd6f679af401eda1f172402006ef8265f8bd58ea\nhttps://github.com/libgit2/libgit2/releases/tag/v1.4.5\nhttps://github.com/libgit2/libgit2/releases/tag/v1.5.1\nhttps://www.libssh2.org\nhttp://www.openwall.com/lists/oss-security/2023/11/06/5\n","enisa_id":"EUVD-2023-26860\n","assigner":"GitHub_M","epss":0.61,"dataProcessed":"Nov 9, 2026, 7:17:22 AM","vulnerabilityProduct":[{"id":"0e50baac-472d-312b-a78c-a58389f83fc9","product":{"name":"libgit2","vendor":{"name":"libgit2"}},"product_version":"\u003c 1.4.5"},{"id":"7c238f44-a4ec-43f3-ad78-54956aef4e88","product":{"name":"libgit2","vendor":{"name":"libgit2"}},"product_version":"\u003c 1.4.5"},{"id":"9c7e95f8-cb45-37a1-92c4-20e8bb9b036e","product":{"name":"libgit2","vendor":{"name":"libgit2"}},"product_version":"\u003d 1.5.0"},{"id":"9dafda0e-0008-4fdd-9cc2-bba4d489db62","product":{"name":"libgit2","vendor":{"name":"libgit2"}},"product_version":"\u003d 1.5.0"}],"vulnerabilityVendor":[{"id":"fe9480ac-fe44-3462-93f1-18f268be446f","vendor":{"name":"libgit2"}}]}}],"enisaIdAdvisory":[{"id":"2f2480d5-e792-3ee6-a9a5-2070a2d93f2d","advisory":{"id":"openSUSE-SU-2024:12632-1","description":"libgit2-1.5.1-1.1 on GA media","summary":"libgit2-1.5.1-1.1 on GA media","datePublished":"Jun 15, 2024, 12:00:00 AM","dateUpdated":"Sep 20, 2026, 8:42:54 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12632-1.json\nhttps://www.suse.com/security/cve/CVE-2023-22742/\n","aliases":"CVE-2023-22742\n","source":{"id":21,"name":"csaf_opensuse"},"advisoryProduct":[{"id":"007a0410-6b11-3a11-9319-2950ac232549","product":{"name":"libgit2-0:1.5.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"0790b8cf-de30-3f49-a361-210fc4144bbf","product":{"name":"libgit2-1_5-1.5.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"1aeb84fd-729c-33f1-b723-2f5aa69886b5","product":{"name":"libgit2-devel-1.5.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"24f6aeef-eff0-38c2-b0a5-535fff2e99c9","product":{"name":"libgit2-0:1.5.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"3eb78181-5e40-3a92-ac44-8bfa6f6fbb07","product":{"name":"libgit2-devel-0:1.5.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"4a29bc38-2a46-3151-a90a-bf49891700ec","product":{"name":"libgit2-1_5-0:1.5.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4ba0c9e3-1d04-3cc8-8c2e-9669eedd7650","product":{"name":"libgit2-1.5.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4db081aa-a5a4-3ed3-acb3-07578c579f59","product":{"name":"libgit2-1_5-1.5.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"4f5d8f43-b224-3205-a318-5dc39654b979","product":{"name":"libgit2-devel-0:1.5.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5a892d17-fff5-320e-aafa-1d6e4422c4ea","product":{"name":"libgit2-1_5-0:1.5.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"5c0e7230-b83c-3e25-b355-4183ca8e2a0e","product":{"name":"libgit2-devel-0:1.5.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"668589a6-1c5a-3ae4-922a-ebb80df252a5","product":{"name":"libgit2-1_5-1.5.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"755e3f03-679b-3ac6-87ba-adbcc85ecb79","product":{"name":"libgit2-1.5.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"84f6c27e-46d9-30c7-afed-aa29ef5f8e8d","product":{"name":"libgit2-0:1.5.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"97781a9a-6ed8-3e64-ad7f-71c8ef6ca395","product":{"name":"libgit2-devel-0:1.5.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"9d7dd96a-46a8-3dba-bcca-2f7a10d4da6d","product":{"name":"openSUSE Tumbleweed","vendor":{"name":"SUSE"}}},{"id":"a3bc7acc-31ce-3fca-a4d5-8d7d81cabb2e","product":{"name":"libgit2-1_5-0:1.5.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"a803bf41-3fe4-32fc-85a3-b0f81081e0d3","product":{"name":"libgit2-1.5.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"b2cc32e5-c23f-30d1-89e2-e0ba588e0f6a","product":{"name":"libgit2-1.5.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"cc8a79af-6fc9-3379-b3ec-2035bd030293","product":{"name":"libgit2-0:1.5.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"e18143e3-3345-356e-8e12-4f246b410e3c","product":{"name":"libgit2-1_5-1.5.1-1.1.s390x","vendor":{"name":"SUSE"}}},{"id":"ee58c955-7ffe-38a4-8a02-bd5e04695a34","product":{"name":"libgit2-1_5-0:1.5.1-1.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"efce5bfc-f4a8-3c34-8614-9391a5a3deea","product":{"name":"libgit2-devel-1.5.1-1.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"f5b130ae-cf4b-3e81-857d-47ccd78c79e0","product":{"name":"libgit2-devel-1.5.1-1.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"f9d317e6-1d91-3e67-ac16-dbae4b64fd32","product":{"name":"libgit2-devel-1.5.1-1.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"39a754b3-ecfd-3716-b095-083981ba0be1","advisory":{"id":"SUSE-SU-2023:1570-1","description":"Security update for libgit2","summary":"Security update for libgit2","datePublished":"Mar 24, 2023, 12:11:55 PM","dateUpdated":"Sep 20, 2026, 2:59:51 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_1570-1.json\nhttps://www.suse.com/support/update/announcement/2023/suse-su-20231570-1/\nhttps://lists.suse.com/pipermail/sle-security-updates/2023-March/014158.html\nhttps://bugzilla.suse.com/1207364\nhttps://www.suse.com/security/cve/CVE-2023-22742/\n","aliases":"CVE-2023-22742\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"04e1b161-8613-3311-8d5f-37ea3820fe99","product":{"name":"libgit2-26-0.26.8-150000.3.18.1.i586","vendor":{"name":"SUSE"}}},{"id":"099039e2-cf58-3a09-8406-5a19bba6ef69","product":{"name":"libgit2-26-0.26.8-150000.3.18.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"19e51e81-439b-3897-b094-51705cbfa8b5","product":{"name":"libgit2-26-0.26.8-150000.3.18.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"258df530-e35d-3555-bf1e-277ddfe171fe","product":{"name":"libgit2-26-0:0.26.8-150000.3.18.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2a035bf9-8ecf-3358-813f-bf2b11b040d2","product":{"name":"libgit2-devel-0.26.8-150000.3.18.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2c11ce0f-3023-3fd8-93fe-ab3d9a972cb8","product":{"name":"libgit2-26-0.26.8-150000.3.18.1.s390x","vendor":{"name":"SUSE"}}},{"id":"43d8a733-836b-3364-9d23-81b647063fbb","product":{"name":"libgit2-devel-0.26.8-150000.3.18.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"4dba4c98-f220-3d4d-8014-311f96d5a30c","product":{"name":"libgit2-26-64bit-0.26.8-150000.3.18.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"5c82aa90-b392-35bb-a48c-2a4869e31bdb","product":{"name":"libgit2-devel-0.26.8-150000.3.18.1.i586","vendor":{"name":"SUSE"}}},{"id":"5dc876ac-704e-3e11-821d-3da49548ffbe","product":{"name":"libgit2-devel-0:0.26.8-150000.3.18.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"5e01e07f-440c-3bfa-86e1-732eb8b6a423","product":{"name":"libgit2-26-0:0.26.8-150000.3.18.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"65a9e878-c2c0-3df7-9b9a-de6b05d6702c","product":{"name":"libgit2-devel-0:0.26.8-150000.3.18.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"67bcf99f-150a-3f8a-a152-1c10b9d40888","product":{"name":"libgit2-devel-0:0.26.8-150000.3.18.1.i586","vendor":{"name":"SUSE"}}},{"id":"6b7e103c-3e4c-3801-bfe3-62c460d55b48","product":{"name":"libgit2-26-64bit-0:0.26.8-150000.3.18.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"7fae3f9d-e65f-3bcc-8ff8-045746644667","product":{"name":"libgit2-26-0:0.26.8-150000.3.18.1.s390x","vendor":{"name":"SUSE"}}},{"id":"7fb59792-e1ac-31c4-ba22-647a2ed77624","product":{"name":"libgit2-devel-0:0.26.8-150000.3.18.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"8abd4f53-bcdc-3be7-93f2-2f0ca169f085","product":{"name":"libgit2-devel-0.26.8-150000.3.18.1.s390x","vendor":{"name":"SUSE"}}},{"id":"8bca7365-ddfe-359d-9ce9-6d624e89b365","product":{"name":"libgit2-devel-0:0.26.8-150000.3.18.1.s390x","vendor":{"name":"SUSE"}}},{"id":"8bcf2303-5513-3640-be59-fb9afc16fd01","product":{"name":"libgit2-26-32bit-0.26.8-150000.3.18.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"a1893158-2069-3292-a9ac-459c74b43910","product":{"name":"libgit2-26-0:0.26.8-150000.3.18.1.i586","vendor":{"name":"SUSE"}}},{"id":"a5a2ac19-36cb-3706-9eaa-938c15bbec19","product":{"name":"openSUSE Leap 15.4","vendor":{"name":"opensuse"}}},{"id":"acd0b93a-9d43-315c-940f-910f318ae9ad","product":{"name":"libgit2-26-0.26.8-150000.3.18.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"afb1324e-8509-35d2-9987-1c4f4ffafee8","product":{"name":"libgit2-26-0:0.26.8-150000.3.18.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"c26540f8-a5b4-361c-b061-ff1f71b5d2b5","product":{"name":"libgit2-devel-0.26.8-150000.3.18.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"cbe38bf7-ef96-3253-b0d4-c70532f1ee49","product":{"name":"libgit2-26-32bit-0:0.26.8-150000.3.18.1.x86_64","vendor":{"name":"SUSE"}}}]}},{"id":"3b7017b5-81f4-38c4-8285-6c0ef7576dec","advisory":{"id":"ICSA-24-046-11","description":"Siemens SCALANCE XCM-/XRM-300","summary":"SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities.\n\nSiemens has released an update for SCALANCE X-300 and recommends to update to the latest version.","datePublished":"Feb 13, 2024, 12:00:00 AM","dateUpdated":"Feb 13, 2024, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/csaf/ssa-806742.json\nhttps://cert-portal.siemens.com/productcert/html/ssa-806742.html\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-806742.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-806742.txt\nhttps://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsa-24-046-11.json\nhttps://www.cisa.gov/news-events/ics-advisories/icsa-24-046-11\n","aliases":"CVE-2006-20001\nCVE-2020-10735\nCVE-2021-3445\nCVE-2021-3638\nCVE-2021-4037\nCVE-2021-36369\nCVE-2021-43666\nCVE-2021-45451\nCVE-2022-1015\nCVE-2022-1348\nCVE-2022-2586\nCVE-2022-2880\nCVE-2022-3294\nCVE-2022-3437\nCVE-2022-3515\nCVE-2022-4415\nCVE-2022-4743\nCVE-2022-4744\nCVE-2022-4900\nCVE-2022-4904\nCVE-2022-23471\nCVE-2022-23521\nCVE-2022-24834\nCVE-2022-26691\nCVE-2022-28737\nCVE-2022-28738\nCVE-2022-28739\nCVE-2022-29154\nCVE-2022-29162\nCVE-2022-29187\nCVE-2022-29536\nCVE-2022-32148\nCVE-2022-34903\nCVE-2022-34918\nCVE-2022-36021\nCVE-2022-36227\nCVE-2022-36760\nCVE-2022-37436\nCVE-2022-37454\nCVE-2022-37797\nCVE-2022-38725\nCVE-2022-39189\nCVE-2022-39260\nCVE-2022-41409\nCVE-2022-41556\nCVE-2022-41715\nCVE-2022-41717\nCVE-2022-41723\nCVE-2022-41860\nCVE-2022-41861\nCVE-2022-41862\nCVE-2022-41903\nCVE-2022-42919\nCVE-2022-44370\nCVE-2022-45061\nCVE-2022-45142\nCVE-2022-45919\nCVE-2022-46392\nCVE-2022-46393\nCVE-2022-47629\nCVE-2022-48303\nCVE-2022-48434\nCVE-2023-0160\nCVE-2023-0330\nCVE-2023-0361\nCVE-2023-0494\nCVE-2023-0567\nCVE-2023-0568\nCVE-2023-0590\nCVE-2023-0662\nCVE-2023-1206\nCVE-2023-1380\nCVE-2023-1393\nCVE-2023-1611\nCVE-2023-1670\nCVE-2023-1838\nCVE-2023-1855\nCVE-2023-1859\nCVE-2023-1989\nCVE-2023-1990\nCVE-2023-2002\nCVE-2023-2124\nCVE-2023-2194\nCVE-2023-2269\nCVE-2023-2861\nCVE-2023-2953\nCVE-2023-3006\nCVE-2023-3090\nCVE-2023-3111\nCVE-2023-3141\nCVE-2023-3212\nCVE-2023-3247\nCVE-2023-3268\nCVE-2023-3301\nCVE-2023-3316\nCVE-2023-3390\nCVE-2023-3611\nCVE-2023-3776\nCVE-2023-3863\nCVE-2023-4128\nCVE-2023-4194\nCVE-2023-20593\nCVE-2023-21255\nCVE-2023-22490\nCVE-2023-22742\nCVE-2023-22745\nCVE-2023-23454\nCVE-2023-23931\nCVE-2023-23934\nCVE-2023-23946\nCVE-2023-24538\nCVE-2023-25153\nCVE-2023-25155\nCVE-2023-25193\nCVE-2023-25588\nCVE-2023-25690\nCVE-2023-25727\nCVE-2023-26081\nCVE-2023-26965\nCVE-2023-27522\nCVE-2023-27534\nCVE-2023-27535\nCVE-2023-27536\nCVE-2023-28450\nCVE-2023-28466\nCVE-2023-28486\nCVE-2023-28487\nCVE-2023-29402\nCVE-2023-29404\nCVE-2023-29405\nCVE-2023-29406\nCVE-2023-29409\nCVE-2023-30086\nCVE-2023-30456\nCVE-2023-30772\nCVE-2023-31084\nCVE-2023-31124\nCVE-2023-31130\nCVE-2023-31147\nCVE-2023-31436\nCVE-2023-31489\nCVE-2023-32067\nCVE-2023-32233\nCVE-2023-32573\nCVE-2023-33203\nCVE-2023-34256\nCVE-2023-34872\nCVE-2023-34969\nCVE-2023-35001\nCVE-2023-35788\nCVE-2023-35789\nCVE-2023-35823\nCVE-2023-35824\nCVE-2023-35828\nCVE-2023-36054\nCVE-2023-36617\nCVE-2023-36664\nCVE-2023-37920\nCVE-2023-38559\nCVE-2023-40283\n","source":{"id":6,"name":"csaf_cisa"},"advisoryProduct":[{"id":"181288fc-9793-3163-86a0-67e5e744cc22","product":{"name":"SCALANCE XCH328 (6GK5328-4TS01-2EC2)","vendor":{"name":"Siemens"}}},{"id":"2f4a9ada-5ecd-3431-bca7-52f068f077f1","product":{"name":"SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)","vendor":{"name":"Siemens"}}},{"id":"336524cb-6123-3be0-ac2d-28d27a219266","product":{"name":"SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)","vendor":{"name":"Siemens"}}},{"id":"67ff263f-28b6-362b-8197-686a2f78ebbc","product":{"name":"SCALANCE XCM332 (6GK5332-0GA01-2AC2)","vendor":{"name":"Siemens"}}},{"id":"83b6a06a-1a5e-39ed-b1bb-feda07584811","product":{"name":"SCALANCE XCM324 (6GK5324-8TS01-2AC2)","vendor":{"name":"Siemens"}}},{"id":"8801bfeb-9b70-3ee0-ade8-1a8f3f26e80d","product":{"name":"SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)","vendor":{"name":"Siemens"}}},{"id":"dd993f20-86e0-3311-8e2c-381c6950f9dd","product":{"name":"SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)","vendor":{"name":"Siemens"}}},{"id":"e15b5678-8202-3506-b9af-b461e989f10f","product":{"name":"SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)","vendor":{"name":"Siemens"}}},{"id":"f3dd664a-0ec1-395e-bcd0-1d49a0c04490","product":{"name":"SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)","vendor":{"name":"Siemens"}}},{"id":"f5def921-81cd-396b-bf88-740e3866cdca","product":{"name":"SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)","vendor":{"name":"Siemens"}}},{"id":"ff61914c-4695-3e5a-b51c-862274e2b7c1","product":{"name":"SCALANCE XCM328 (6GK5328-4TS01-2AC2)","vendor":{"name":"Siemens"}}}]}},{"id":"59099005-d739-31f9-9641-dca9270cac00","advisory":{"id":"msrc_CVE-2023-22742","description":"libgit2 fails to verify SSH keys by default","datePublished":"Jan 4, 2023, 12:00:00 AM","dateUpdated":"Feb 21, 2026, 3:47:57 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2023/msrc_cve-2023-22742.json\n","aliases":"CVE-2023-22742\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"01d1423a-634f-39e5-92ce-441f009f8d2d","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"157e42de-ec10-3b1b-936c-386f74746440","product":{"name":"cbl2 rust 1.68.0-1","vendor":{"name":"Microsoft"}}},{"id":"3a029586-a363-328f-af4f-8248183a4125","product":{"name":"cbl2 libgit2 1.4.5-1","vendor":{"name":"Microsoft"}}},{"id":"5fa65bd2-cdf6-3a88-8b52-8994ff56b0e3","product":{"name":"2.0","vendor":{"name":"Smiths Medical"}}},{"id":"6794ed9b-b476-3f2b-ac67-c6fc7ebbd6a4","product":{"name":"cm1 rust 1.59.0-1","vendor":{"name":"Microsoft"}}},{"id":"68660480-7d85-36ba-9244-bcfa1505a34b","product":{"name":"azl3 rust 1.75.0-14","vendor":{"name":"Microsoft"}}},{"id":"7767db91-4fba-335d-bf1f-76902843e235","product":{"name":"libgit2","vendor":{"name":"libgit2"}}},{"id":"8a11b917-104e-3645-adaa-fdafeb569efd","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"964272e3-f3d4-31bb-87c5-cc7e3c3e7af3","product":{"name":"azl3 rust 1.86.0-1","vendor":{"name":"Microsoft"}}},{"id":"a9a67b91-7fa5-3f4d-9f0e-4a42f7ae1664","product":{"name":"1.0","vendor":{"name":"GE"}}},{"id":"e9cb42be-5f68-31c8-91ae-fbd29a92cb2b","product":{"name":"rust","vendor":{"name":"rust-lang"}}}]}},{"id":"985d0b62-7ac8-3588-9deb-dc629fe836c5","advisory":{"id":"SSA-806742","description":"SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4","summary":"SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities.\n\nSiemens has released an update for SCALANCE X-300 and recommends to update to the latest version.","datePublished":"Feb 13, 2024, 12:00:00 AM","dateUpdated":"Feb 13, 2024, 12:00:00 AM","baseScore":0.0,"references":"https://cert-portal.siemens.com/productcert/html/ssa-806742.html\nhttps://cert-portal.siemens.com/productcert/csaf/ssa-806742.json\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-806742.pdf\nhttps://cert-portal.siemens.com/productcert/txt/ssa-806742.txt\n","aliases":"CVE-2006-20001\nCVE-2020-10735\nCVE-2021-3445\nCVE-2021-3638\nCVE-2021-4037\nCVE-2021-36369\nCVE-2021-43666\nCVE-2021-45451\nCVE-2022-1015\nCVE-2022-1348\nCVE-2022-2586\nCVE-2022-2880\nCVE-2022-3294\nCVE-2022-3437\nCVE-2022-3515\nCVE-2022-4415\nCVE-2022-4743\nCVE-2022-4744\nCVE-2022-4900\nCVE-2022-4904\nCVE-2022-23471\nCVE-2022-23521\nCVE-2022-24834\nCVE-2022-26691\nCVE-2022-28737\nCVE-2022-28738\nCVE-2022-28739\nCVE-2022-29154\nCVE-2022-29162\nCVE-2022-29187\nCVE-2022-29536\nCVE-2022-32148\nCVE-2022-34903\nCVE-2022-34918\nCVE-2022-36021\nCVE-2022-36227\nCVE-2022-36760\nCVE-2022-37436\nCVE-2022-37454\nCVE-2022-37797\nCVE-2022-38725\nCVE-2022-39189\nCVE-2022-39260\nCVE-2022-41409\nCVE-2022-41556\nCVE-2022-41715\nCVE-2022-41717\nCVE-2022-41723\nCVE-2022-41860\nCVE-2022-41861\nCVE-2022-41862\nCVE-2022-41903\nCVE-2022-42919\nCVE-2022-44370\nCVE-2022-45061\nCVE-2022-45142\nCVE-2022-45919\nCVE-2022-46392\nCVE-2022-46393\nCVE-2022-47629\nCVE-2022-48303\nCVE-2022-48434\nCVE-2023-0160\nCVE-2023-0330\nCVE-2023-0361\nCVE-2023-0494\nCVE-2023-0567\nCVE-2023-0568\nCVE-2023-0590\nCVE-2023-0662\nCVE-2023-1206\nCVE-2023-1380\nCVE-2023-1393\nCVE-2023-1611\nCVE-2023-1670\nCVE-2023-1838\nCVE-2023-1855\nCVE-2023-1859\nCVE-2023-1989\nCVE-2023-1990\nCVE-2023-2002\nCVE-2023-2124\nCVE-2023-2194\nCVE-2023-2269\nCVE-2023-2861\nCVE-2023-2953\nCVE-2023-3006\nCVE-2023-3090\nCVE-2023-3111\nCVE-2023-3141\nCVE-2023-3212\nCVE-2023-3247\nCVE-2023-3268\nCVE-2023-3301\nCVE-2023-3316\nCVE-2023-3390\nCVE-2023-3611\nCVE-2023-3776\nCVE-2023-3863\nCVE-2023-4128\nCVE-2023-4194\nCVE-2023-20593\nCVE-2023-21255\nCVE-2023-22490\nCVE-2023-22742\nCVE-2023-22745\nCVE-2023-23454\nCVE-2023-23931\nCVE-2023-23934\nCVE-2023-23946\nCVE-2023-24538\nCVE-2023-25153\nCVE-2023-25155\nCVE-2023-25193\nCVE-2023-25588\nCVE-2023-25690\nCVE-2023-25727\nCVE-2023-26081\nCVE-2023-26965\nCVE-2023-27522\nCVE-2023-27534\nCVE-2023-27535\nCVE-2023-27536\nCVE-2023-28450\nCVE-2023-28466\nCVE-2023-28486\nCVE-2023-28487\nCVE-2023-29402\nCVE-2023-29404\nCVE-2023-29405\nCVE-2023-29406\nCVE-2023-29409\nCVE-2023-30086\nCVE-2023-30456\nCVE-2023-30772\nCVE-2023-31084\nCVE-2023-31124\nCVE-2023-31130\nCVE-2023-31147\nCVE-2023-31436\nCVE-2023-31489\nCVE-2023-32067\nCVE-2023-32233\nCVE-2023-32573\nCVE-2023-33203\nCVE-2023-34256\nCVE-2023-34872\nCVE-2023-34969\nCVE-2023-35001\nCVE-2023-35788\nCVE-2023-35789\nCVE-2023-35823\nCVE-2023-35824\nCVE-2023-35828\nCVE-2023-36054\nCVE-2023-36617\nCVE-2023-36664\nCVE-2023-37920\nCVE-2023-38559\nCVE-2023-40283\n","source":{"id":7,"name":"csaf_siemens"},"advisoryProduct":[{"id":"3b43bdd7-9dba-3968-9a21-97dd761eac3e","product":{"name":"SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)","vendor":{"name":"Siemens"}}},{"id":"718f535d-530a-3d2c-a604-c853549d8171","product":{"name":"SCALANCE XCM324 (6GK5324-8TS01-2AC2)","vendor":{"name":"Siemens"}}},{"id":"78ea765e-e96a-3ae2-8e2b-35d9d91176ef","product":{"name":"SCALANCE XCM332 (6GK5332-0GA01-2AC2)","vendor":{"name":"Siemens"}}},{"id":"7a413722-9707-3c7a-9859-0015f87dd211","product":{"name":"SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)","vendor":{"name":"Siemens"}}},{"id":"7cc9d529-0533-3b48-9340-e6d0bcf034ba","product":{"name":"SCALANCE XCH328 (6GK5328-4TS01-2EC2)","vendor":{"name":"Siemens"}}},{"id":"8f266c96-3d86-3437-a450-5a6c7248becb","product":{"name":"SCALANCE XCM328 (6GK5328-4TS01-2AC2)","vendor":{"name":"Siemens"}}},{"id":"ae6f3c59-52c7-3054-808f-2dea3df8c80f","product":{"name":"SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)","vendor":{"name":"Siemens"}}},{"id":"cef61c5b-bc09-39a3-83aa-09abb8e35c8d","product":{"name":"SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)","vendor":{"name":"Siemens"}}},{"id":"e47e8dc9-dde1-3a8e-8e01-fe70a2db7894","product":{"name":"SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)","vendor":{"name":"Siemens"}}},{"id":"e6457c66-dce8-3d52-8153-0ceb37c97bc7","product":{"name":"SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)","vendor":{"name":"Siemens"}}},{"id":"f055a7b5-52d0-33cb-8e1a-e5f1067e8037","product":{"name":"SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)","vendor":{"name":"Siemens"}}}]}},{"id":"aaafae42-27eb-3ee2-911f-d192e7fef353","advisory":{"id":"SUSE-SU-2023:1788-1","description":"Security update for libgit2","summary":"Security update for libgit2","datePublished":"Apr 6, 2023, 10:34:13 AM","dateUpdated":"Apr 6, 2023, 10:34:13 AM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_1788-1.json\nhttps://www.suse.com/support/update/announcement/2023/suse-su-20231788-1/\nhttps://lists.suse.com/pipermail/sle-updates/2023-April/028698.html\nhttps://bugzilla.suse.com/1207364\nhttps://www.suse.com/security/cve/CVE-2023-22742/\n","aliases":"CVE-2023-22742\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"05afda37-d2b7-3d17-8fbd-f4ef89e0f516","product":{"name":"libgit2-devel-1.3.0-150400.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"2db0632f-d116-368f-af1d-91cfed0d8bfc","product":{"name":"libgit2-devel-1.3.0-150400.3.6.1.i586","vendor":{"name":"SUSE"}}},{"id":"2f1c123b-ceb6-335e-9a59-e1fc1ff54a95","product":{"name":"libgit2-devel-1.3.0-150400.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"5b348a6c-56e2-31d7-ac7e-bc3c3a7cdcac","product":{"name":"libgit2-1_3-1.3.0-150400.3.6.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"629a8389-a6ce-39ec-b32f-662356c32ed4","product":{"name":"libgit2-1_3-64bit-1.3.0-150400.3.6.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"804d0d55-a3bf-31f5-a8ff-9bcc5988dc4b","product":{"name":"libgit2-1_3-1.3.0-150400.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"9eb89501-e747-3a41-bc01-3851aab0db75","product":{"name":"libgit2-devel-1.3.0-150400.3.6.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a970106e-3e7f-3c38-adf3-6b707528fae1","product":{"name":"SUSE Linux Enterprise Module for Development Tools 15 SP4","vendor":{"name":"SUSE"}}},{"id":"abc1eaed-999c-3675-8eca-b64674f5102c","product":{"name":"openSUSE Leap 15.4","vendor":{"name":"opensuse"}}},{"id":"ad677dab-27a9-3d40-8b14-145f18d58616","product":{"name":"libgit2-1_3-1.3.0-150400.3.6.1.i586","vendor":{"name":"SUSE"}}},{"id":"ba3c2172-7ff5-35f7-ab35-cafd739ea6a1","product":{"name":"libgit2-1_3-1.3.0-150400.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"d02ebe6a-b3f2-31f5-8bad-e68bfdd312dd","product":{"name":"libgit2-devel-1.3.0-150400.3.6.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"deae0a62-b058-32e4-b610-43fd32c2bd92","product":{"name":"libgit2-1_3-32bit-1.3.0-150400.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"e7de8b42-c14d-3309-a492-2511bd4b051a","product":{"name":"libgit2-1_3-1.3.0-150400.3.6.1.s390x","vendor":{"name":"SUSE"}}}]}},{"id":"e514888d-9a1b-380f-afe5-65ac9100f3e0","advisory":{"id":"SUSE-SU-2023:1909-1","description":"Security update for libgit2","summary":"Security update for libgit2","datePublished":"Apr 19, 2023, 8:55:54 AM","dateUpdated":"Sep 20, 2026, 3:02:30 PM","baseScore":0.0,"references":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_1909-1.json\nhttps://www.suse.com/support/update/announcement/2023/suse-su-20231909-1/\nhttps://lists.suse.com/pipermail/sle-updates/2023-April/028879.html\nhttps://bugzilla.suse.com/1207364\nhttps://www.suse.com/security/cve/CVE-2023-22742/\n","aliases":"CVE-2023-22742\n","source":{"id":22,"name":"csaf_suse"},"advisoryProduct":[{"id":"1e2a8c92-2f2e-3b48-ba49-819c8f3bed3a","product":{"name":"libgit2-28-32bit-0.28.4-150200.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"24e50381-02b9-3eb8-a066-d65fbcc7e5d1","product":{"name":"libgit2-devel-0.28.4-150200.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"2b012fb4-4787-3223-9ef4-76de9132f25a","product":{"name":"libgit2-28-64bit-0:0.28.4-150200.3.6.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"31ddf250-9aa9-3e25-acaa-24f34350657e","product":{"name":"libgit2-devel-0.28.4-150200.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"32810e27-18ef-391a-a0de-b2ab720e75a4","product":{"name":"libgit2-28-32bit-0:0.28.4-150200.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"38b1d9e4-a651-353c-95c3-6fd26cd218a2","product":{"name":"SUSE Linux Enterprise Real Time 15 SP3","vendor":{"name":"SUSE"}}},{"id":"5bdfd37b-2b02-3d19-83d0-a2d5f3773ecf","product":{"name":"libgit2-devel-0:0.28.4-150200.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"5f37e867-ed73-352c-b93c-16a96ad05cb5","product":{"name":"libgit2-28-0:0.28.4-150200.3.6.1.i586","vendor":{"name":"SUSE"}}},{"id":"60ae31a4-5ff7-3a59-876a-307d49314872","product":{"name":"libgit2-28-0:0.28.4-150200.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"668ae7d9-6e77-3121-a18c-2c4f261c1049","product":{"name":"libgit2-28-0:0.28.4-150200.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"6c8f7b7a-d08c-31de-a10d-44219cf9fcb2","product":{"name":"openSUSE Leap 15.4","vendor":{"name":"opensuse"}}},{"id":"884145f6-c466-3a3c-a6c4-68da69ddd001","product":{"name":"SUSE Manager Server Module 4.2","vendor":{"name":"SUSE"}}},{"id":"913d173a-7bf4-3c22-86e7-29b7d35cbeee","product":{"name":"libgit2-28-0.28.4-150200.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"92907b8b-201b-3d93-8c32-6b8ba83d147f","product":{"name":"libgit2-28-64bit-0.28.4-150200.3.6.1.aarch64_ilp32","vendor":{"name":"SUSE"}}},{"id":"94828f95-9c12-38ca-8ea0-1b5bbe554377","product":{"name":"libgit2-devel-0.28.4-150200.3.6.1.i586","vendor":{"name":"SUSE"}}},{"id":"97d5757c-172d-3510-9b1b-37b7eb0d9b01","product":{"name":"libgit2-devel-0:0.28.4-150200.3.6.1.i586","vendor":{"name":"SUSE"}}},{"id":"9bf18a41-d24f-313a-a7e6-b93b90af17ef","product":{"name":"libgit2-28-0.28.4-150200.3.6.1.i586","vendor":{"name":"SUSE"}}},{"id":"a09a0ec0-5a66-39c5-aa40-5b7884e10515","product":{"name":"libgit2-28-0:0.28.4-150200.3.6.1.s390x","vendor":{"name":"SUSE"}}},{"id":"a1043d85-fe8d-3545-bb82-ff791f22d221","product":{"name":"SUSE Manager Server Module 4.3","vendor":{"name":"SUSE"}}},{"id":"ae84fe83-0a7e-3183-82e0-02ebba4ae367","product":{"name":"libgit2-devel-0.28.4-150200.3.6.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d79ff202-d2f3-31a1-832b-4fdd1f59dfa5","product":{"name":"libgit2-devel-0:0.28.4-150200.3.6.1.s390x","vendor":{"name":"SUSE"}}},{"id":"d82e7c70-43c7-3f0d-b616-9e570f24dc75","product":{"name":"libgit2-devel-0:0.28.4-150200.3.6.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e556e919-52d9-3bb4-afd0-9643c42d70ef","product":{"name":"libgit2-28-0.28.4-150200.3.6.1.s390x","vendor":{"name":"SUSE"}}},{"id":"e6835fbe-40ca-352c-93d0-7367b745fc7b","product":{"name":"libgit2-devel-0.28.4-150200.3.6.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"e8a56379-d7d6-3b8d-9afc-8bb485d6255f","product":{"name":"libgit2-28-0.28.4-150200.3.6.1.aarch64","vendor":{"name":"SUSE"}}},{"id":"eb3df4c6-f0a9-3916-99c6-2c8be888afd8","product":{"name":"libgit2-28-0.28.4-150200.3.6.1.ppc64le","vendor":{"name":"SUSE"}}},{"id":"eebaba70-eaf7-3cab-ab21-c3bc9e52873f","product":{"name":"libgit2-devel-0:0.28.4-150200.3.6.1.x86_64","vendor":{"name":"SUSE"}}},{"id":"f53ed8c5-afa0-3790-a599-e51d04b42c7f","product":{"name":"libgit2-28-0:0.28.4-150200.3.6.1.ppc64le","vendor":{"name":"SUSE"}}}]}}]}