{"id":"GO-2023-2402","revision":null,"records":[{"revision":"f0d35262af5341c99624c4b45e6fef21","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-48795","aliases":[],"title":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and …","description":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.","state":0,"publishedAt":"2023-12-18T00:00:00+00:00","modifiedAt":"2026-10-15T00:08:53.704+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","https://matt.ucc.asn.au/dropbear/CHANGES","https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES","https://www.netsarang.com/en/xshell-update-history/","https://www.paramiko.org/changelog.html","https://www.openssh.com/openbsd.html","https://github.com/openssh/openssh-portable/commits/master","https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ","https://www.bitvise.com/ssh-server-version-history","https://github.com/ronf/asyncssh/tags","https://gitlab.com/libssh/libssh-mirror/-/tags","https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/","https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42","https://www.openssh.com/txt/release-9.6","https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/","https://www.terrapin-attack.com/","https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25","https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst","https://thorntech.com/cve-2023-48795-and-sftp-gateway/","https://github.com/warp-tech/russh/releases/tag/v0.40.2","https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0","https://www.openwall.com/lists/oss-security/2023/12/18/2","https://twitter.com/TrueSkrillor/status/1736774389725565005","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://github.com/paramiko/paramiko/issues/2337","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://news.ycombinator.com/item?id=38684904","https://news.ycombinator.com/item?id=38685286","http://www.openwall.com/lists/oss-security/2023/12/18/3","https://github.com/mwiede/jsch/issues/457","https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6","https://github.com/erlang/otp/releases/tag/OTP-26.2.1","https://github.com/advisories/GHSA-45x7-px36-x8w8","https://security-tracker.debian.org/tracker/source-package/libssh2","https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg","https://security-tracker.debian.org/tracker/CVE-2023-48795","https://bugzilla.suse.com/show_bug.cgi?id=1217950","https://bugzilla.redhat.com/show_bug.cgi?id=2254210","https://bugs.gentoo.org/920280","https://ubuntu.com/security/CVE-2023-48795","https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/","https://access.redhat.com/security/cve/cve-2023-48795","https://github.com/mwiede/jsch/pull/461","https://github.com/drakkan/sftpgo/releases/tag/v2.5.6","https://github.com/libssh2/libssh2/pull/1291","https://forum.netgate.com/topic/184941/terrapin-ssh-attack","https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5","https://github.com/rapier1/hpn-ssh/releases","https://github.com/proftpd/proftpd/issues/456","https://github.com/TeraTermProject/teraterm/releases/tag/v5.1","https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15","https://oryx-embedded.com/download/#changelog","https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update","https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22","https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab","https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3","https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","https://crates.io/crates/thrussh/versions","https://github.com/NixOS/nixpkgs/pull/275249","http://www.openwall.com/lists/oss-security/2023/12/19/5","https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc","https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/","http://www.openwall.com/lists/oss-security/2023/12/20/3","http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html","https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES","https://github.com/apache/mina-sshd/issues/445","https://github.com/hierynomus/sshj/issues/916","https://github.com/janmojzis/tinyssh/issues/81","https://www.openwall.com/lists/oss-security/2023/12/20/3","https://security-tracker.debian.org/tracker/source-package/trilead-ssh2","https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://www.debian.org/security/2023/dsa-5586","https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508","https://www.theregister.com/2023/12/20/terrapin_attack_ssh","https://filezilla-project.org/versions.php","https://nova.app/releases/#v11.8","https://roumenpetrov.info/secsh/#news20231220","https://www.vandyke.com/products/securecrt/history.txt","https://help.panic.com/releasenotes/transmit5/","https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta","https://github.com/PowerShell/Win32-OpenSSH/issues/2189","https://winscp.net/eng/docs/history#6.2.2","https://www.bitvise.com/ssh-client-version-history#933","https://github.com/cyd01/KiTTY/issues/520","https://www.debian.org/security/2023/dsa-5588","https://github.com/ssh-mitm/ssh-mitm/issues/165","https://news.ycombinator.com/item?id=38732005","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://security.gentoo.org/glsa/202312-16","https://security.gentoo.org/glsa/202312-17","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/","https://security.netapp.com/advisory/ntap-20240105-0004/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://support.apple.com/kb/HT214084","http://seclists.org/fulldisclosure/2024/Mar/21","https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html","http://www.openwall.com/lists/oss-security/2024/04/17/8","http://www.openwall.com/lists/oss-security/2024/03/06/3"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-48795","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-48795","identifiers":["CVE-2023-48795"]},"retained":false,"historicalAffected":[]},{"revision":"fbfdb0e713bd4b07b11e11be541b8320","observedAt":"2026-11-08T23:06:29.548+00:00","statement":{"source":"euvd","id":"EUVD-2023-3093","aliases":["CVE-2023-48795","GHSA-45x7-px36-x8w8"],"title":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and …","description":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","score":5.9,"severity":null}],"references":["https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","https://matt.ucc.asn.au/dropbear/CHANGES","https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES","https://www.netsarang.com/en/xshell-update-history/","https://www.paramiko.org/changelog.html","https://www.openssh.com/openbsd.html","https://github.com/openssh/openssh-portable/commits/master","https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ","https://www.bitvise.com/ssh-server-version-history","https://github.com/ronf/asyncssh/tags","https://gitlab.com/libssh/libssh-mirror/-/tags","https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/","https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42","https://www.openssh.com/txt/release-9.6","https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/","https://www.terrapin-attack.com/","https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25","https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst","https://thorntech.com/cve-2023-48795-and-sftp-gateway/","https://github.com/warp-tech/russh/releases/tag/v0.40.2","https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0","https://www.openwall.com/lists/oss-security/2023/12/18/2","https://twitter.com/TrueSkrillor/status/1736774389725565005","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://github.com/paramiko/paramiko/issues/2337","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://news.ycombinator.com/item?id=38684904","https://news.ycombinator.com/item?id=38685286","http://www.openwall.com/lists/oss-security/2023/12/18/3","https://github.com/mwiede/jsch/issues/457","https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6","https://github.com/erlang/otp/releases/tag/OTP-26.2.1","https://github.com/advisories/GHSA-45x7-px36-x8w8","https://security-tracker.debian.org/tracker/source-package/libssh2","https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg","https://security-tracker.debian.org/tracker/CVE-2023-48795","https://bugzilla.suse.com/show_bug.cgi?id=1217950","https://bugzilla.redhat.com/show_bug.cgi?id=2254210","https://bugs.gentoo.org/920280","https://ubuntu.com/security/CVE-2023-48795","https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/","https://access.redhat.com/security/cve/cve-2023-48795","https://github.com/mwiede/jsch/pull/461","https://github.com/drakkan/sftpgo/releases/tag/v2.5.6","https://github.com/libssh2/libssh2/pull/1291","https://forum.netgate.com/topic/184941/terrapin-ssh-attack","https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5","https://github.com/rapier1/hpn-ssh/releases","https://github.com/proftpd/proftpd/issues/456","https://github.com/TeraTermProject/teraterm/releases/tag/v5.1","https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15","https://oryx-embedded.com/download/#changelog","https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update","https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22","https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab","https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3","https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","https://crates.io/crates/thrussh/versions","https://github.com/NixOS/nixpkgs/pull/275249","http://www.openwall.com/lists/oss-security/2023/12/19/5","https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc","https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/","http://www.openwall.com/lists/oss-security/2023/12/20/3","http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html","https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES","https://github.com/apache/mina-sshd/issues/445","https://github.com/hierynomus/sshj/issues/916","https://github.com/janmojzis/tinyssh/issues/81","https://www.openwall.com/lists/oss-security/2023/12/20/3","https://security-tracker.debian.org/tracker/source-package/trilead-ssh2","https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://www.debian.org/security/2023/dsa-5586","https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508","https://www.theregister.com/2023/12/20/terrapin_attack_ssh","https://filezilla-project.org/versions.php","https://nova.app/releases/#v11.8","https://roumenpetrov.info/secsh/#news20231220","https://www.vandyke.com/products/securecrt/history.txt","https://help.panic.com/releasenotes/transmit5/","https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta","https://github.com/PowerShell/Win32-OpenSSH/issues/2189","https://winscp.net/eng/docs/history#6.2.2","https://www.bitvise.com/ssh-client-version-history#933","https://github.com/cyd01/KiTTY/issues/520","https://www.debian.org/security/2023/dsa-5588","https://github.com/ssh-mitm/ssh-mitm/issues/165","https://news.ycombinator.com/item?id=38732005","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://security.gentoo.org/glsa/202312-16","https://security.gentoo.org/glsa/202312-17","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/","https://security.netapp.com/advisory/ntap-20240105-0004/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://support.apple.com/kb/HT214084","http://seclists.org/fulldisclosure/2024/Mar/21","https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html","http://www.openwall.com/lists/oss-security/2024/04/17/8","http://www.openwall.com/lists/oss-security/2024/03/06/3"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-3093","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Dec 18, 2023, 12:00:00 AM","dateUpdated":"Oct 15, 2026, 12:08:53 AM"},"relatedAdvisories":[{"id":"NCSC-2025-0051","title":"Kwetsbaarheden verholpen in Siemens producten","vulnerabilityIds":["CVE-2022-22127","CVE-2022-22128","CVE-2022-39188","CVE-2022-39842","CVE-2022-40303","CVE-2022-40304","CVE-2022-43750","CVE-2022-47069","CVE-2022-47929","CVE-2023-0045","CVE-2023-0215","CVE-2023-0286","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0590","CVE-2023-1073","CVE-2023-1074","CVE-2023-1118","CVE-2023-1206","CVE-2023-1380","CVE-2023-1670","CVE-2023-2194","CVE-2023-3446","CVE-2023-3611","CVE-2023-4623","CVE-2023-4921","CVE-2023-5363","CVE-2023-5678","CVE-2023-5717","CVE-2023-6129","CVE-2023-6237","CVE-2023-7250","CVE-2023-23454","CVE-2023-23455","CVE-2023-23559","CVE-2023-26545","CVE-2023-28484","CVE-2023-28578","CVE-2023-29469","CVE-2023-31085","CVE-2023-31315","CVE-2023-35001","CVE-2023-37482","CVE-2023-39192","CVE-2023-39193","CVE-2023-42754","CVE-2023-43522","CVE-2023-44320","CVE-2023-44322","CVE-2023-45853","CVE-2023-45863","CVE-2023-46604","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385","CVE-2024-0727","CVE-2024-2511","CVE-2024-4603","CVE-2024-4741","CVE-2024-5535","CVE-2024-6119","CVE-2024-9143","CVE-2024-23814","CVE-2024-26306","CVE-2024-33016","CVE-2024-36504","CVE-2024-45386","CVE-2024-46665","CVE-2024-46666","CVE-2024-46668","CVE-2024-46669","CVE-2024-46670","CVE-2024-48884","CVE-2024-48885","CVE-2024-50560","CVE-2024-50561","CVE-2024-50572","CVE-2024-52963","CVE-2024-53648","CVE-2024-53651","CVE-2024-53977","CVE-2024-54015","CVE-2024-54021","CVE-2024-54089","CVE-2024-54090","CVE-2025-23363","CVE-2025-23403","CVE-2025-24499","CVE-2025-24532","CVE-2025-24811","CVE-2025-24812","CVE-2025-24956","CVE-2022-2588","CVE-2022-2663","CVE-2022-3524","CVE-2022-4304","CVE-2022-4450"]},{"id":"WID-SEC-W-2024-0874","title":"Oracle Enterprise Manager: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-36770","CVE-2022-34381","CVE-2022-42920","CVE-2022-46337","CVE-2023-1370","CVE-2023-20861","CVE-2023-42503","CVE-2023-44487","CVE-2023-48795","CVE-2024-21067"]},{"id":"SUSE-SU-2024:0460-1","title":"Security update for rekor","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2024-0299","title":" Kwetsbaarheden verholpen in Oracle Analytics","vulnerabilityIds":["CVE-2021-23926","CVE-2021-37533","CVE-2022-0239","CVE-2022-21797","CVE-2022-40152","CVE-2023-1370","CVE-2023-1436","CVE-2023-26031","CVE-2023-33202","CVE-2023-46589","CVE-2023-48795","CVE-2023-49083","CVE-2023-52428","CVE-2024-0727","CVE-2024-21139","CVE-2024-25710"]},{"id":"SUSE-SU-2024:0525-1","title":"Security update for libssh","vulnerabilityIds":["CVE-2019-14889","CVE-2020-16135","CVE-2020-1730","CVE-2021-3634","CVE-2023-1667","CVE-2023-2283","CVE-2023-48795","CVE-2023-6004","CVE-2023-6918"]},{"id":"RHSA-2024:1210","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.2 bug fix and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-48795"]},{"id":"RHSA-2024:2735","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-paramiko) security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"SUSE-SU-2023:4903-1","title":"Security update for openssh","vulnerabilityIds":["CVE-2023-48795"]},{"id":"SUSE-SU-2024:0140-1","title":"Security update for libssh","vulnerabilityIds":["CVE-2023-1667","CVE-2023-2283","CVE-2023-48795","CVE-2023-6004","CVE-2023-6918"]},{"id":"SUSE-SU-2024:0974-1","title":"Security update for jsch-agent-proxy","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2026:12025-1","title":"python313-paramiko-5.0.0-1.2 on GA media","vulnerabilityIds":["CVE-2022-24302","CVE-2023-48795"]},{"id":"openSUSE-SU-2025:20177-1","title":"Security update for cheat","vulnerabilityIds":["CVE-2023-48795","CVE-2025-21613","CVE-2025-21614","CVE-2025-22869","CVE-2025-22870","CVE-2025-47913","CVE-2025-47914","CVE-2025-58181"]},{"id":"NCSC-2024-0325","title":"Kwetsbaarheden verholpen in Aruba Networks ArubaOS en InstantOS","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51385","CVE-2024-42393","CVE-2024-42394","CVE-2024-42395","CVE-2024-42396","CVE-2024-42397","CVE-2024-42398","CVE-2024-42399","CVE-2024-42400"]},{"id":"RHSA-2024:4151","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.20 security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-5037"]},{"id":"WID-SEC-W-2024-1228","title":"Red Hat OpenStack: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2024-1135","CVE-2023-39325","CVE-2023-44487","CVE-2023-45288","CVE-2024-4438","CVE-2023-39326","CVE-2023-45287","CVE-2024-1394","CVE-2024-24680","CVE-2024-1141","CVE-2023-45803","CVE-2023-48795","CVE-2023-6725","CVE-2023-6110","CVE-2024-22195"]},{"id":"SUSE-SU-2024:0327-1","title":"Security update for bouncycastle, jsch","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:0628","title":"Red Hat Security Advisory: libssh security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"SUSE-SU-2024:3656-1","title":"Security update for etcd","vulnerabilityIds":["CVE-2018-16873","CVE-2018-16874","CVE-2018-16875","CVE-2018-16886","CVE-2020-15106","CVE-2020-15112","CVE-2021-28235","CVE-2022-41723","CVE-2023-29406","CVE-2023-47108","CVE-2023-48795"]},{"id":"SSA-364175","title":"SSA-364175: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.4-h1","vulnerabilityIds":["CVE-2023-48795","CVE-2024-3596","CVE-2024-5913","CVE-2024-5920","CVE-2024-9468","CVE-2024-9471","CVE-2025-0114","CVE-2025-4231","CVE-2025-4619"]},{"id":"WID-SEC-W-2024-0885","title":"Oracle Database Server: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-36632","CVE-2023-48795","CVE-2023-5072","CVE-2024-20995","CVE-2024-21058","CVE-2024-21066","CVE-2024-21093"]},{"id":"WID-SEC-W-2024-0892","title":"Oracle Retail Applications: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-31160","CVE-2022-34381","CVE-2022-42920","CVE-2022-46337","CVE-2023-1436","CVE-2023-2976","CVE-2023-34981","CVE-2023-48795"]},{"id":"WID-SEC-W-2024-1186","title":"IBM DB2 REST: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-19126","CVE-2020-10029","CVE-2020-1751","CVE-2020-1752","CVE-2021-35942","CVE-2021-3711","CVE-2021-3712","CVE-2021-3999","CVE-2021-4160","CVE-2022-0778","CVE-2022-1292","CVE-2022-2068","CVE-2022-2097","CVE-2023-48795"]},{"id":"WID-SEC-W-2024-1639","title":"Oracle Enterprise Manager: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-37533","CVE-2023-1370","CVE-2023-40167","CVE-2023-48795"]},{"id":"RHSA-2024:8235","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.39 security update","vulnerabilityIds":["CVE-2023-29401","CVE-2023-45288","CVE-2023-47108","CVE-2023-48795","CVE-2024-2961","CVE-2024-28180","CVE-2024-44082"]},{"id":"WID-SEC-W-2024-1781","title":"Aruba ArubaOS: Mehrere Schwachstellen ermöglichen Codeausführung und DOS","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51385","CVE-2024-42398","CVE-2024-42399","CVE-2024-42400"]},{"id":"openSUSE-SU-2024:13522-1","title":"libssh2-1-1.11.0-2.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:1859","title":"Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.1 security and bug fix update","vulnerabilityIds":["CVE-2023-39326","CVE-2023-45142","CVE-2023-45287","CVE-2023-48795","CVE-2024-24786","CVE-2024-28180"]},{"id":"openSUSE-SU-2024:0036-1","title":"Security update for tinyssh","vulnerabilityIds":["CVE-2023-48795"]},{"id":"WID-SEC-W-2024-0578","title":"Apple macOS: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-42816","CVE-2022-48554","CVE-2023-28826","CVE-2023-42853","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385","CVE-2024-0258","CVE-2024-23201","CVE-2024-23204","CVE-2024-23205","CVE-2024-23216","CVE-2024-23218","CVE-2024-23225","CVE-2024-23226","CVE-2024-23227","CVE-2024-23230","CVE-2024-23231","CVE-2024-23232","CVE-2024-23233","CVE-2024-23234","CVE-2024-23235","CVE-2024-23238","CVE-2024-23239","CVE-2024-23241","CVE-2024-23242","CVE-2024-23244","CVE-2024-23245","CVE-2024-23246","CVE-2024-23247","CVE-2024-23248","CVE-2024-23249","CVE-2024-23250","CVE-2024-23252","CVE-2024-23253","CVE-2024-23254","CVE-2024-23255","CVE-2024-23257","CVE-2024-23258","CVE-2024-23259","CVE-2024-23260","CVE-2024-23263","CVE-2024-23264","CVE-2024-23265","CVE-2024-23266","CVE-2024-23267","CVE-2024-23268","CVE-2024-23269","CVE-2024-23270","CVE-2024-23272","CVE-2024-23273","CVE-2024-23274","CVE-2024-23275","CVE-2024-23276","CVE-2024-23277","CVE-2024-23278","CVE-2024-23279","CVE-2024-23280","CVE-2024-23281","CVE-2024-23283","CVE-2024-23284","CVE-2024-23285","CVE-2024-23286","CVE-2024-23287","CVE-2024-23288","CVE-2024-23289","CVE-2024-23290","CVE-2024-23291","CVE-2024-23292","CVE-2024-23293","CVE-2024-23294","CVE-2024-23296","CVE-2024-23299"]},{"id":"RHSA-2024:0594","title":"Red Hat Security Advisory: openssh security update","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51385"]},{"id":"WID-SEC-W-2024-1913","title":"Red Hat OpenShift Container Platform: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2018-15209","CVE-2021-46939","CVE-2021-47018","CVE-2021-47257","CVE-2021-47284","CVE-2021-47304","CVE-2021-47373","CVE-2021-47383","CVE-2021-47408","CVE-2021-47461","CVE-2021-47468","CVE-2021-47491","CVE-2021-47548","CVE-2021-47579","CVE-2021-47624","CVE-2022-48632","CVE-2022-48637","CVE-2022-48743","CVE-2022-48747","CVE-2022-48757","CVE-2023-25433","CVE-2023-28746","CVE-2023-45142","CVE-2023-45290","CVE-2023-47108","CVE-2023-48795","CVE-2023-52356","CVE-2023-52448","CVE-2023-52451","CVE-2023-52458","CVE-2023-52463","CVE-2023-52469","CVE-2023-52471","CVE-2023-52486","CVE-2023-52530","CVE-2023-52619","CVE-2023-52622","CVE-2023-52623","CVE-2023-52635","CVE-2023-52648","CVE-2023-52651","CVE-2023-52653","CVE-2023-52658","CVE-2023-52662","CVE-2023-52679","CVE-2023-52707","CVE-2023-52730","CVE-2023-52756","CVE-2023-52762","CVE-2023-52764","CVE-2023-52771","CVE-2023-52775","CVE-2023-52777","CVE-2023-52784","CVE-2023-52791","CVE-2023-52796","CVE-2023-52803","CVE-2023-52809","CVE-2023-52811","CVE-2023-52832","CVE-2023-52834","CVE-2023-52845","CVE-2023-52847","CVE-2023-52864","CVE-2023-52885","CVE-2023-6228","CVE-2024-21823","CVE-2024-2201","CVE-2024-24788","CVE-2024-24790","CVE-2024-25739","CVE-2024-26586","CVE-2024-26601","CVE-2024-26614","CVE-2024-26640","CVE-2024-26660","CVE-2024-26669","CVE-2024-26686","CVE-2024-26698","CVE-2024-26704","CVE-2024-26733","CVE-2024-26737","CVE-2024-26740","CVE-2024-26772","CVE-2024-26773","CVE-2024-26802","CVE-2024-26810","CVE-2024-26837","CVE-2024-26840","CVE-2024-26843","CVE-2024-26852","CVE-2024-26853","CVE-2024-26855","CVE-2024-26870","CVE-2024-26878","CVE-2024-26897","CVE-2024-26908","CVE-2024-26921","CVE-2024-26925","CVE-2024-26930","CVE-2024-26940","CVE-2024-26947","CVE-2024-26958","CVE-2024-26960","CVE-2024-26961","CVE-2024-27010","CVE-2024-27011","CVE-2024-27019","CVE-2024-27020","CVE-2024-27025","CVE-2024-27030","CVE-2024-27046","CVE-2024-27052","CVE-2024-27062","CVE-2024-27065","CVE-2024-27388","CVE-2024-27395","CVE-2024-27434","CVE-2024-31076","CVE-2024-33621","CVE-2024-34064","CVE-2024-35789","CVE-2024-35790","CVE-2024-35801","CVE-2024-35807","CVE-2024-35810","CVE-2024-35814","CVE-2024-35823","CVE-2024-35824","CVE-2024-35845","CVE-2024-35847","CVE-2024-35852","CVE-2024-35876","CVE-2024-35885","CVE-2024-35893","CVE-2024-35896","CVE-2024-35897","CVE-2024-35899","CVE-2024-35900","CVE-2024-35907","CVE-2024-35910","CVE-2024-35912","CVE-2024-35924","CVE-2024-35925","CVE-2024-35930","CVE-2024-35937","CVE-2024-35938","CVE-2024-35946","CVE-2024-35947","CVE-2024-35952","CVE-2024-35962","CVE-2024-36000","CVE-2024-36005","CVE-2024-36006","CVE-2024-36010","CVE-2024-36016","CVE-2024-36017","CVE-2024-36020","CVE-2024-36025","CVE-2024-36270","CVE-2024-36286","CVE-2024-36489","CVE-2024-36886","CVE-2024-36889","CVE-2024-36896","CVE-2024-36904","CVE-2024-36905","CVE-2024-36917","CVE-2024-36921","CVE-2024-36922","CVE-2024-36927","CVE-2024-36929","CVE-2024-36933","CVE-2024-36940","CVE-2024-36941","CVE-2024-36945","CVE-2024-36950","CVE-2024-36954","CVE-2024-36960","CVE-2024-36971","CVE-2024-36978","CVE-2024-36979","CVE-2024-37370","CVE-2024-37371","CVE-2024-37891","CVE-2024-38384","CVE-2024-38428","CVE-2024-38473","CVE-2024-38538","CVE-2024-38555","CVE-2024-38556","CVE-2024-38573","CVE-2024-38575","CVE-2024-38586","CVE-2024-38596","CVE-2024-38598","CVE-2024-38615","CVE-2024-38627","CVE-2024-38663","CVE-2024-39276","CVE-2024-39472","CVE-2024-39476","CVE-2024-39487","CVE-2024-39502","CVE-2024-39573","CVE-2024-40897","CVE-2024-40927","CVE-2024-40974","CVE-2024-6104","CVE-2024-6345","CVE-2024-6409"]},{"id":"openSUSE-SU-2023:0411-1","title":"Security update for putty","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:4479","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.33 bug fix and security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-6104","CVE-2024-6387"]},{"id":"RHSA-2024:4662","title":"Red Hat Security Advisory: OpenShift Virtualization 4.15.3 Images security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:3918","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.30 packages and security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:0880","title":"Red Hat Security Advisory: Release of OpenShift Serverless Client kn 1.31.1 security update","vulnerabilityIds":["CVE-2023-39326","CVE-2023-48795","CVE-2023-49568","CVE-2023-49569"]},{"id":"openSUSE-SU-2024:13979-1","title":"gitui-0.26.2-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:1383","title":"Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.15.0 security, enhancement, & bug fix update","vulnerabilityIds":["CVE-2021-35937","CVE-2021-35938","CVE-2021-35939","CVE-2023-3462","CVE-2023-5363","CVE-2023-5954","CVE-2023-5981","CVE-2023-7104","CVE-2023-24532","CVE-2023-26159","CVE-2023-27043","CVE-2023-28486","CVE-2023-28487","CVE-2023-29406","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39615","CVE-2023-42282","CVE-2023-42465","CVE-2023-43646","CVE-2023-43804","CVE-2023-45803","CVE-2023-46218","CVE-2023-48631","CVE-2023-48795","CVE-2023-51385","CVE-2024-0553","CVE-2024-0567"]},{"id":"WID-SEC-W-2024-1082","title":"Juniper JUNOS: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2016-20012","CVE-2017-15906","CVE-2018-15473","CVE-2018-15919","CVE-2018-20685","CVE-2019-6109","CVE-2019-6110","CVE-2019-6111","CVE-2020-12062","CVE-2020-14145","CVE-2020-15778","CVE-2021-28041","CVE-2021-36368","CVE-2021-41617","CVE-2023-28531","CVE-2023-38408","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385"]},{"id":"RHSA-2024:0455","title":"Red Hat Security Advisory: openssh security update","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51385"]},{"id":"NCSC-2025-0166","title":"Kwetsbaarheden verholpen in Fortinet producten","vulnerabilityIds":["CVE-2023-42788","CVE-2023-48795","CVE-2024-6387","CVE-2024-45324","CVE-2024-54020","CVE-2025-22252","CVE-2025-26466","CVE-2025-47294","CVE-2025-47295"]},{"id":"RHSA-2024:0040","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.0 security and extras update","vulnerabilityIds":["CVE-2023-48795","CVE-2023-49569","CVE-2024-24786","CVE-2024-28110"]},{"id":"RHBA-2024:1136","title":"Red Hat Bug Fix Advisory: podman bug fix update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:1150","title":"Red Hat Security Advisory: buildah security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:3635","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-22201","CVE-2024-23899","CVE-2024-23900","CVE-2024-24786","CVE-2024-28149","CVE-2024-34144","CVE-2024-34145"]},{"id":"SUSE-SU-2024:0210-1","title":"Security update for erlang","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2025:15488-1","title":"tomcat-9.0.108-1.1 on GA media","vulnerabilityIds":["CVE-2025-48989"]},{"id":"openSUSE-SU-2024:13772-1","title":"jsch-agent-proxy-connector-factory-0.0.9-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:4955","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.25 bug fix and security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-6409"]},{"id":"RHSA-2024:1557","title":"Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift Builds 1.0.1","vulnerabilityIds":["CVE-2023-48795","CVE-2023-49568","CVE-2023-49569"]},{"id":"SUSE-SU-2024:0558-1","title":"Security update for libssh2_org","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2024-0304","title":"Kwetsbaarheden verholpen in Oracle PeopleSoft","vulnerabilityIds":["CVE-2023-28756","CVE-2023-42503","CVE-2023-48795","CVE-2024-0232","CVE-2024-21122","CVE-2024-21154","CVE-2024-21158","CVE-2024-21178","CVE-2024-21180","CVE-2024-26308"]},{"id":"WID-SEC-W-2025-0810","title":"Oracle Retail Applications: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-34381","CVE-2023-24998","CVE-2023-40167","CVE-2023-46589","CVE-2023-48795","CVE-2023-51074","CVE-2024-22243","CVE-2024-29025","CVE-2024-47554"]},{"id":"WID-SEC-W-2024-3320","title":"Moxa Ethernet Switches: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-20372","CVE-2023-48795"]},{"id":"RHSA-2024:1674","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update","vulnerabilityIds":["CVE-2023-1973","CVE-2023-4639","CVE-2023-48795","CVE-2024-1459","CVE-2024-1635"]},{"id":"openSUSE-SU-2024:13628-1","title":"tinyssh-20240101-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2024-0293","title":"Kwetsbaarheden verholpen in Oracle Communications Applications","vulnerabilityIds":["CVE-2020-13956","CVE-2021-29489","CVE-2021-37533","CVE-2022-34381","CVE-2023-5981","CVE-2023-29081","CVE-2023-35116","CVE-2023-44487","CVE-2023-46218","CVE-2023-48795","CVE-2024-0232","CVE-2024-22257","CVE-2024-22262","CVE-2024-23807","CVE-2024-27316","CVE-2024-29025","CVE-2024-29133"]},{"id":"NCSC-2024-0433","title":"Kwetsbaarheden verholpen in Siemens producten","vulnerabilityIds":["CVE-2021-3506","CVE-2023-2975","CVE-2023-3341","CVE-2023-3446","CVE-2023-3817","CVE-2023-4236","CVE-2023-4408","CVE-2023-4807","CVE-2023-5363","CVE-2023-5517","CVE-2023-5678","CVE-2023-5679","CVE-2023-5680","CVE-2023-6129","CVE-2023-6237","CVE-2023-6516","CVE-2023-7104","CVE-2023-28450","CVE-2023-30584","CVE-2023-32002","CVE-2023-32003","CVE-2023-32004","CVE-2023-32005","CVE-2023-32006","CVE-2023-32558","CVE-2023-32559","CVE-2023-32736","CVE-2023-38552","CVE-2023-38709","CVE-2023-39331","CVE-2023-39332","CVE-2023-39333","CVE-2023-44487","CVE-2023-45143","CVE-2023-46218","CVE-2023-46219","CVE-2023-46280","CVE-2023-46809","CVE-2023-47038","CVE-2023-47039","CVE-2023-47100","CVE-2023-48795","CVE-2023-49441","CVE-2023-50387","CVE-2023-50868","CVE-2023-52389","CVE-2024-0232","CVE-2024-0727","CVE-2024-2004","CVE-2024-2379","CVE-2024-2398","CVE-2024-2466","CVE-2024-2511","CVE-2024-4603","CVE-2024-4741","CVE-2024-5535","CVE-2024-5594","CVE-2024-21890","CVE-2024-21891","CVE-2024-21892","CVE-2024-21896","CVE-2024-22017","CVE-2024-22019","CVE-2024-22025","CVE-2024-24758","CVE-2024-24795","CVE-2024-24806","CVE-2024-26306","CVE-2024-26925","CVE-2024-27316","CVE-2024-27980","CVE-2024-27982","CVE-2024-27983","CVE-2024-28882","CVE-2024-29119","CVE-2024-36140","CVE-2024-44102","CVE-2024-46888","CVE-2024-46889","CVE-2024-46890","CVE-2024-46891","CVE-2024-46892","CVE-2024-46894","CVE-2024-47783","CVE-2024-47808","CVE-2024-47940","CVE-2024-47941","CVE-2024-47942","CVE-2024-50310","CVE-2024-50313","CVE-2024-50557","CVE-2024-50558","CVE-2024-50559","CVE-2024-50560","CVE-2024-50561","CVE-2024-50572"]},{"id":"WID-SEC-W-2025-0139","title":"Oracle Database Server: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-26345","CVE-2023-48795","CVE-2023-52428","CVE-2024-21211","CVE-2025-21553"]},{"id":"ICSA-23-166-11","title":"Siemens SIMATIC S7-1500 TM MFP Linux Kernel","vulnerabilityIds":["CVE-2020-12762","CVE-2021-3759","CVE-2021-4037","CVE-2021-33655","CVE-2021-44879","CVE-2022-0171","CVE-2022-1012","CVE-2022-1015","CVE-2022-1184","CVE-2022-1292","CVE-2022-1343","CVE-2022-1434","CVE-2022-1462","CVE-2022-1473","CVE-2022-1679","CVE-2022-1852","CVE-2022-1882","CVE-2022-2068","CVE-2022-2078","CVE-2022-2097","CVE-2022-2153","CVE-2022-2274","CVE-2022-2327","CVE-2022-2503","CVE-2022-2586","CVE-2022-2588","CVE-2022-2602","CVE-2022-2663","CVE-2022-2905","CVE-2022-2959","CVE-2022-2978","CVE-2022-3028","CVE-2022-3104","CVE-2022-3115","CVE-2022-3169","CVE-2022-3303","CVE-2022-3521","CVE-2022-3524","CVE-2022-3534","CVE-2022-3545","CVE-2022-3564","CVE-2022-3565","CVE-2022-3586","CVE-2022-3594","CVE-2022-3606","CVE-2022-3621","CVE-2022-3625","CVE-2022-3628","CVE-2022-3629","CVE-2022-3633","CVE-2022-3635","CVE-2022-3646","CVE-2022-3649","CVE-2022-4095","CVE-2022-4129","CVE-2022-4139","CVE-2022-4269","CVE-2022-4304","CVE-2022-4450","CVE-2022-4662","CVE-2022-20421","CVE-2022-20422","CVE-2022-20566","CVE-2022-20572","CVE-2022-21123","CVE-2022-21125","CVE-2022-21166","CVE-2022-21505","CVE-2022-26373","CVE-2022-32250","CVE-2022-32296","CVE-2022-34918","CVE-2022-36123","CVE-2022-36280","CVE-2022-36879","CVE-2022-36946","CVE-2022-39188","CVE-2022-39190","CVE-2022-40307","CVE-2022-40768","CVE-2022-41218","CVE-2022-41222","CVE-2022-41674","CVE-2022-41849","CVE-2022-41850","CVE-2022-42328","CVE-2022-42329","CVE-2022-42432","CVE-2022-42703","CVE-2022-42719","CVE-2022-42720","CVE-2022-42721","CVE-2022-42722","CVE-2022-42895","CVE-2022-42896","CVE-2022-43750","CVE-2022-47518","CVE-2022-47520","CVE-2022-47929","CVE-2022-47946","CVE-2023-0215","CVE-2023-0286","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0590","CVE-2023-1077","CVE-2023-1095","CVE-2023-1206","CVE-2023-2898","CVE-2023-3141","CVE-2023-3268","CVE-2023-3338","CVE-2023-3389","CVE-2023-3446","CVE-2023-3609","CVE-2023-3610","CVE-2023-3611","CVE-2023-3772","CVE-2023-3773","CVE-2023-3777","CVE-2023-4004","CVE-2023-4015","CVE-2023-4273","CVE-2023-4623","CVE-2023-4911","CVE-2023-4921","CVE-2023-5178","CVE-2023-5197","CVE-2023-5678","CVE-2023-5717","CVE-2023-6606","CVE-2023-6931","CVE-2023-6932","CVE-2023-7008","CVE-2023-7104","CVE-2023-23454","CVE-2023-23455","CVE-2023-23559","CVE-2023-26607","CVE-2023-31085","CVE-2023-31436","CVE-2023-32233","CVE-2023-35001","CVE-2023-35827","CVE-2023-36660","CVE-2023-37453","CVE-2023-39189","CVE-2023-39192","CVE-2023-39193","CVE-2023-39194","CVE-2023-42753","CVE-2023-42754","CVE-2023-42755","CVE-2023-45863","CVE-2023-45871","CVE-2023-48795","CVE-2023-50495","CVE-2023-51384","CVE-2023-51385","CVE-2023-51767","CVE-2024-0232","CVE-2024-0553","CVE-2024-0567","CVE-2024-0584","CVE-2024-0684","CVE-2024-22365","CVE-2024-25062"]},{"id":"WID-SEC-W-2024-1655","title":"Oracle PeopleSoft: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-28756","CVE-2023-42503","CVE-2023-48795","CVE-2024-0232","CVE-2024-21122","CVE-2024-21154","CVE-2024-21158","CVE-2024-21178","CVE-2024-21180","CVE-2024-26308"]},{"id":"WID-SEC-W-2024-3377","title":"Dell PowerProtect Data Domain: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2024-45759","CVE-2024-48010","CVE-2024-48011","CVE-2017-16829","CVE-2017-5849","CVE-2018-7208","CVE-2019-14889","CVE-2020-12912","CVE-2020-16135","CVE-2020-1730","CVE-2020-24455","CVE-2020-8694","CVE-2020-8695","CVE-2021-27219","CVE-2021-3565","CVE-2021-3634","CVE-2022-1210","CVE-2022-1622","CVE-2022-1996","CVE-2022-22576","CVE-2022-25313","CVE-2022-27774","CVE-2022-27775","CVE-2022-27776","CVE-2022-27781","CVE-2022-27782","CVE-2022-29361","CVE-2022-32205","CVE-2022-32206","CVE-2022-32207","CVE-2022-32208","CVE-2022-32221","CVE-2022-35252","CVE-2022-40023","CVE-2022-40090","CVE-2022-42915","CVE-2022-42916","CVE-2022-43551","CVE-2022-43552","CVE-2022-4603","CVE-2022-48064","CVE-2022-48624","CVE-2023-0461","CVE-2023-1667","CVE-2023-1916","CVE-2023-20592","CVE-2023-2137","CVE-2023-22745","CVE-2023-2283","CVE-2023-23914","CVE-2023-23915","CVE-2023-23916","CVE-2023-23934","CVE-2023-25577","CVE-2023-26965","CVE-2023-27043","CVE-2023-2731","CVE-2023-27533","CVE-2023-27534","CVE-2023-27535","CVE-2023-27536","CVE-2023-27538","CVE-2023-28319","CVE-2023-28320","CVE-2023-28321","CVE-2023-28322","CVE-2023-31083","CVE-2023-34055","CVE-2023-35116","CVE-2023-38286","CVE-2023-38469","CVE-2023-38471","CVE-2023-38472","CVE-2023-38545","CVE-2023-38546","CVE-2023-39197","CVE-2023-39198","CVE-2023-39804","CVE-2023-40217","CVE-2023-42465","CVE-2023-4255","CVE-2023-45139","CVE-2023-45322","CVE-2023-45863","CVE-2023-45871","CVE-2023-46136","CVE-2023-46218","CVE-2023-46219","CVE-2023-46751","CVE-2023-48795","CVE-2023-49083","CVE-2023-50447","CVE-2023-5049","CVE-2023-50495","CVE-2023-50782","CVE-2023-51257","CVE-2023-52425","CVE-2023-52426","CVE-2023-5678","CVE-2023-5717","CVE-2023-5752","CVE-2023-6004","CVE-2023-6597","CVE-2023-6918","CVE-2023-7207","CVE-2024-0450","CVE-2024-0727","CVE-2024-0985","CVE-2024-21626","CVE-2024-22195","CVE-2024-22365","CVE-2024-23651","CVE-2024-23652","CVE-2024-23653","CVE-2024-23672","CVE-2024-24549","CVE-2024-25062","CVE-2024-26130","CVE-2024-26458","CVE-2024-26461","CVE-2024-28085","CVE-2024-28182","CVE-2024-28219","CVE-2024-28757"]},{"id":"RHSA-2024:1676","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update","vulnerabilityIds":["CVE-2023-1973","CVE-2023-4639","CVE-2023-48795","CVE-2024-1459","CVE-2024-1635"]},{"id":"RHSA-2024:2728","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 director Operator container images security update","vulnerabilityIds":["CVE-2023-39326","CVE-2023-45288","CVE-2023-48795"]},{"id":"ICSA-25-105-08","title":"ABB M2M Gateway","vulnerabilityIds":["CVE-2022-23521","CVE-2022-41903","CVE-2023-25690","CVE-2023-38408","CVE-2016-10009","CVE-2022-2526","CVE-2022-37434","CVE-2023-20032","CVE-2022-38177","CVE-2022-38178","CVE-2023-2828","CVE-2023-3341","CVE-2022-41974","CVE-2022-40674","CVE-2023-25652","CVE-2023-29007","CVE-2022-2964","CVE-2021-26401","CVE-2022-4378","CVE-2022-42703","CVE-2022-3564","CVE-2023-32233","CVE-2023-35001","CVE-2023-3609","CVE-2023-42753","CVE-2022-42898","CVE-2020-22218","CVE-2023-0286","CVE-2023-24329","CVE-2022-29154","CVE-2023-22809","CVE-2022-25147","CVE-2021-25220","CVE-2022-2795","CVE-2022-43750","CVE-2023-20569","CVE-2023-20593","CVE-2023-40217","CVE-2023-48795","CVE-2013-0169","CVE-2012-4929","CVE-1999-0524"]},{"id":"RHSA-2024:1677","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update","vulnerabilityIds":["CVE-2023-1973","CVE-2023-4639","CVE-2023-48795","CVE-2024-1102","CVE-2024-1635"]},{"id":"openSUSE-SU-2024:13608-1","title":"apache-sshd-2.12.0-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"WID-SEC-W-2025-0144","title":"Oracle Financial Services Applications: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-34169","CVE-2023-26031","CVE-2023-33201","CVE-2023-39410","CVE-2023-44483","CVE-2023-48795","CVE-2023-51074","CVE-2023-52070","CVE-2024-28219","CVE-2024-34064","CVE-2024-34750","CVE-2024-35195","CVE-2024-38819","CVE-2024-38827","CVE-2024-45492","CVE-2025-21550"]},{"id":"ICSA-24-193-11","title":"Siemens RUGGEDCOM APE 1808","vulnerabilityIds":["CVE-2023-48795","CVE-2024-3596","CVE-2024-5913","CVE-2024-5920","CVE-2024-9468","CVE-2024-9471","CVE-2025-0114","CVE-2025-4231","CVE-2025-4619"]},{"id":"SUSE-SU-2023:4905-1","title":"Security update for openssh","vulnerabilityIds":["CVE-2023-48795"]},{"id":"WID-SEC-W-2024-0869","title":"Oracle Communications: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-40152","CVE-2022-40896","CVE-2022-45688","CVE-2023-2283","CVE-2023-31122","CVE-2023-33201","CVE-2023-34053","CVE-2023-34055","CVE-2023-4016","CVE-2023-41056","CVE-2023-43496","CVE-2023-44487","CVE-2023-45142","CVE-2023-4641","CVE-2023-46589","CVE-2023-47100","CVE-2023-4863","CVE-2023-48795","CVE-2023-49083","CVE-2023-5072","CVE-2023-51074","CVE-2023-51257","CVE-2023-51775","CVE-2023-5341","CVE-2023-5363","CVE-2023-6507","CVE-2024-1635","CVE-2024-21626","CVE-2024-22201","CVE-2024-22233","CVE-2024-22257","CVE-2024-22259","CVE-2024-25062","CVE-2024-26130","CVE-2024-26308"]},{"id":"SUSE-SU-2024:0972-1","title":"Security update for jbcrypt, trilead-ssh2","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2025-0026","title":"Kwetsbaarheden verholpen in Oracle JD Edwards","vulnerabilityIds":["CVE-2023-2976","CVE-2023-3961","CVE-2023-4091","CVE-2023-4782","CVE-2023-5678","CVE-2023-6129","CVE-2023-38552","CVE-2023-39017","CVE-2023-42669","CVE-2023-48795","CVE-2024-0727","CVE-2024-21245","CVE-2024-22019","CVE-2024-22020","CVE-2024-27280","CVE-2024-27281","CVE-2024-27282","CVE-2024-27983","CVE-2024-29041","CVE-2025-21507","CVE-2025-21508","CVE-2025-21509","CVE-2025-21510","CVE-2025-21511","CVE-2025-21512","CVE-2025-21513","CVE-2025-21514","CVE-2025-21515","CVE-2025-21517","CVE-2025-21524","CVE-2025-21527","CVE-2025-21538","CVE-2025-21552"]},{"id":"RHSA-2024:4484","title":"Red Hat Security Advisory: OpenShift Container Platform 4.13.45 bug fix and security update","vulnerabilityIds":["CVE-2023-45288","CVE-2023-48795","CVE-2024-5037","CVE-2024-6387","CVE-2024-28180"]},{"id":"WID-SEC-W-2024-1474","title":"Red Hat OpenShift Container Platform: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-25210","CVE-2023-29483","CVE-2023-45142","CVE-2023-45289","CVE-2023-45290","CVE-2023-47108","CVE-2023-48795","CVE-2023-52425","CVE-2024-0874","CVE-2024-1394","CVE-2024-22189","CVE-2024-2398","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786","CVE-2024-28110","CVE-2024-28176","CVE-2024-28180","CVE-2024-28757","CVE-2024-28849","CVE-2024-29180","CVE-2024-3177","CVE-2024-3727"]},{"id":"RHSA-2024:0041","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.0 bug fix and security update","vulnerabilityIds":["CVE-2019-25210","CVE-2023-45142","CVE-2023-45289","CVE-2023-47108","CVE-2023-48795","CVE-2023-49569","CVE-2024-0874","CVE-2024-22189","CVE-2024-24783","CVE-2024-24784","CVE-2024-24785","CVE-2024-24786","CVE-2024-28110","CVE-2024-28176","CVE-2024-28180","CVE-2024-28849","CVE-2024-29180"]},{"id":"openSUSE-SU-2024:13592-1","title":"erlang-26.2.1-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:5438","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.28 packages and security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13835-1","title":"etcd-for-k8s1.28-3.5.12-1.1 on GA media","vulnerabilityIds":["CVE-2023-47108","CVE-2023-48795"]},{"id":"openSUSE-SU-2025:15740-1","title":"erlang27-27.1.3-1.1 on GA media","vulnerabilityIds":["CVE-2020-25623","CVE-2020-35733","CVE-2022-37026","CVE-2023-48795","CVE-2025-48041"]},{"id":"openSUSE-SU-2024:0135-1","title":"Security update for gitui","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13523-1","title":"python-paramiko-doc-3.3.1-2.3 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:5432","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2024-0296","title":"Kwetsbaarheden verholpen in Oracle Enterprise Manager","vulnerabilityIds":["CVE-2021-37533","CVE-2023-1370","CVE-2023-40167","CVE-2023-48795"]},{"id":"NCSC-2025-0061","title":"Kwetsbaarheden verholpen in Siemens producten","vulnerabilityIds":["CVE-2024-46665","CVE-2024-46666","CVE-2024-46668","CVE-2024-46669","CVE-2024-46670","CVE-2024-48884","CVE-2024-48885","CVE-2024-50560","CVE-2024-50561","CVE-2024-50572","CVE-2024-52963","CVE-2024-53648","CVE-2024-53651","CVE-2024-53977","CVE-2024-54015","CVE-2024-54021","CVE-2024-54089","CVE-2024-54090","CVE-2025-23363","CVE-2025-23403","CVE-2025-24499","CVE-2025-24532","CVE-2025-24811","CVE-2025-24812","CVE-2025-24956","CVE-2022-2588","CVE-2022-2663","CVE-2022-3524","CVE-2022-4304","CVE-2022-4450","CVE-2022-22127","CVE-2022-22128","CVE-2022-39188","CVE-2022-39842","CVE-2022-40303","CVE-2022-40304","CVE-2022-43750","CVE-2022-47069","CVE-2022-47929","CVE-2023-0045","CVE-2023-0215","CVE-2023-0286","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0590","CVE-2023-1073","CVE-2023-1074","CVE-2023-1118","CVE-2023-1206","CVE-2023-1380","CVE-2023-1670","CVE-2023-2194","CVE-2023-3446","CVE-2023-3611","CVE-2023-4623","CVE-2023-4921","CVE-2023-5363","CVE-2023-5678","CVE-2023-5717","CVE-2023-6129","CVE-2023-6237","CVE-2023-7250","CVE-2023-23454","CVE-2023-23455","CVE-2023-23559","CVE-2023-26545","CVE-2023-28484","CVE-2023-28578","CVE-2023-29469","CVE-2023-31085","CVE-2023-31315","CVE-2023-35001","CVE-2023-37482","CVE-2023-39192","CVE-2023-39193","CVE-2023-42754","CVE-2023-43522","CVE-2023-44320","CVE-2023-44322","CVE-2023-45853","CVE-2023-45863","CVE-2023-46604","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385","CVE-2024-0727","CVE-2024-2511","CVE-2024-4603","CVE-2024-4741","CVE-2024-5535","CVE-2024-6119","CVE-2024-9143","CVE-2024-23814","CVE-2024-26306","CVE-2024-33016","CVE-2024-36504","CVE-2024-45386"]},{"id":"openSUSE-SU-2024:13565-1","title":"teleport-14.3.0-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"WID-SEC-W-2024-0523","title":"SolarWinds Security Event Manager: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2024-0692","CVE-2023-48795","CVE-2023-42670","CVE-2023-4154","CVE-2023-3961"]},{"id":"SSA-398330","title":"SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP  >= V3.1.0 and < V3.1.5","vulnerabilityIds":["CVE-2013-0340","CVE-2013-4235","CVE-2014-7209","CVE-2015-20107","CVE-2016-3189","CVE-2016-3709","CVE-2016-4658","CVE-2016-5131","CVE-2016-9318","CVE-2016-10228","CVE-2016-10739","CVE-2017-0663","CVE-2017-7375","CVE-2017-7376","CVE-2017-9047","CVE-2017-9048","CVE-2017-9049","CVE-2017-9050","CVE-2017-15422","CVE-2017-16931","CVE-2017-16932","CVE-2017-17512","CVE-2017-18258","CVE-2018-0495","CVE-2018-12886","CVE-2018-14404","CVE-2018-14567","CVE-2018-18928","CVE-2018-19591","CVE-2018-20482","CVE-2018-20843","CVE-2018-25032","CVE-2019-3855","CVE-2019-3856","CVE-2019-3857","CVE-2019-3858","CVE-2019-3859","CVE-2019-3860","CVE-2019-3861","CVE-2019-3862","CVE-2019-3863","CVE-2019-5018","CVE-2019-5094","CVE-2019-5188","CVE-2019-5435","CVE-2019-5436","CVE-2019-5443","CVE-2019-5481","CVE-2019-5482","CVE-2019-6109","CVE-2019-6110","CVE-2019-6111","CVE-2019-6488","CVE-2019-7309","CVE-2019-8457","CVE-2019-9169","CVE-2019-9636","CVE-2019-9674","CVE-2019-9740","CVE-2019-9923","CVE-2019-9936","CVE-2019-9937","CVE-2019-9947","CVE-2019-9948","CVE-2019-10160","CVE-2019-11360","CVE-2019-12290","CVE-2019-12900","CVE-2019-12904","CVE-2019-13057","CVE-2019-13565","CVE-2019-13627","CVE-2019-15847","CVE-2019-15903","CVE-2019-16056","CVE-2019-16168","CVE-2019-16905","CVE-2019-17498","CVE-2019-17543","CVE-2019-17594","CVE-2019-17595","CVE-2019-18224","CVE-2019-18276","CVE-2019-18348","CVE-2019-19126","CVE-2019-19242","CVE-2019-19244","CVE-2019-19317","CVE-2019-19603","CVE-2019-19645","CVE-2019-19646","CVE-2019-19880","CVE-2019-19906","CVE-2019-19923","CVE-2019-19924","CVE-2019-19925","CVE-2019-19926","CVE-2019-19956","CVE-2019-19959","CVE-2019-20218","CVE-2019-20367","CVE-2019-20388","CVE-2019-20795","CVE-2019-20907","CVE-2019-25013","CVE-2019-1010022","CVE-2019-1010023","CVE-2019-1010024","CVE-2019-1010025","CVE-2019-1010180","CVE-2020-1712","CVE-2020-1751","CVE-2020-1752","CVE-2020-6096","CVE-2020-7595","CVE-2020-8169","CVE-2020-8177","CVE-2020-8231","CVE-2020-8284","CVE-2020-8285","CVE-2020-8286","CVE-2020-8315","CVE-2020-8492","CVE-2020-9327","CVE-2020-10029","CVE-2020-10531","CVE-2020-10543","CVE-2020-10735","CVE-2020-10878","CVE-2020-11501","CVE-2020-11655","CVE-2020-11656","CVE-2020-12062","CVE-2020-12243","CVE-2020-12723","CVE-2020-12762","CVE-2020-13434","CVE-2020-13435","CVE-2020-13529","CVE-2020-13630","CVE-2020-13631","CVE-2020-13632","CVE-2020-13776","CVE-2020-13777","CVE-2020-13871","CVE-2020-14145","CVE-2020-14422","CVE-2020-15358","CVE-2020-15523","CVE-2020-15778","CVE-2020-15801","CVE-2020-19185","CVE-2020-19186","CVE-2020-19187","CVE-2020-19188","CVE-2020-19189","CVE-2020-19190","CVE-2020-19909","CVE-2020-21047","CVE-2020-21913","CVE-2020-22218","CVE-2020-24659","CVE-2020-24977","CVE-2020-25692","CVE-2020-25709","CVE-2020-25710","CVE-2020-26116","CVE-2020-27618","CVE-2020-28196","CVE-2020-29361","CVE-2020-29362","CVE-2020-29363","CVE-2020-29562","CVE-2020-29573","CVE-2020-35525","CVE-2020-35527","CVE-2020-36221","CVE-2020-36222","CVE-2020-36223","CVE-2020-36224","CVE-2020-36225","CVE-2020-36226","CVE-2020-36227","CVE-2020-36228","CVE-2020-36229","CVE-2020-36230","CVE-2021-3177","CVE-2021-3326","CVE-2021-3426","CVE-2021-3516","CVE-2021-3517","CVE-2021-3518","CVE-2021-3520","CVE-2021-3537","CVE-2021-3541","CVE-2021-3580","CVE-2021-3733","CVE-2021-3737","CVE-2021-3826","CVE-2021-3997","CVE-2021-3998","CVE-2021-3999","CVE-2021-4122","CVE-2021-4189","CVE-2021-4209","CVE-2021-20193","CVE-2021-20227","CVE-2021-20231","CVE-2021-20232","CVE-2021-20305","CVE-2021-22876","CVE-2021-22890","CVE-2021-22897","CVE-2021-22898","CVE-2021-22901","CVE-2021-22922","CVE-2021-22923","CVE-2021-22924","CVE-2021-22925","CVE-2021-22926","CVE-2021-22945","CVE-2021-22946","CVE-2021-22947","CVE-2021-23336","CVE-2021-27212","CVE-2021-27218","CVE-2021-27219","CVE-2021-27645","CVE-2021-28041","CVE-2021-28153","CVE-2021-28363","CVE-2021-28861","CVE-2021-31239","CVE-2021-32292","CVE-2021-33294","CVE-2021-33560","CVE-2021-33574","CVE-2021-33910","CVE-2021-35942","CVE-2021-36084","CVE-2021-36085","CVE-2021-36086","CVE-2021-36087","CVE-2021-36222","CVE-2021-36690","CVE-2021-37600","CVE-2021-37750","CVE-2021-38604","CVE-2021-43396","CVE-2021-43618","CVE-2021-44879","CVE-2021-45960","CVE-2021-46143","CVE-2021-46195","CVE-2021-46828","CVE-2021-46848","CVE-2022-0391","CVE-2022-0563","CVE-2022-0778","CVE-2022-1271","CVE-2022-1292","CVE-2022-1304","CVE-2022-1343","CVE-2022-1434","CVE-2022-1473","CVE-2022-2068","CVE-2022-2097","CVE-2022-2274","CVE-2022-2509","CVE-2022-3715","CVE-2022-3821","CVE-2022-4304","CVE-2022-4450","CVE-2022-22576","CVE-2022-22822","CVE-2022-22823","CVE-2022-22824","CVE-2022-22825","CVE-2022-22826","CVE-2022-22827","CVE-2022-23218","CVE-2022-23219","CVE-2022-23308","CVE-2022-23852","CVE-2022-23990","CVE-2022-24407","CVE-2022-25235","CVE-2022-25236","CVE-2022-25313","CVE-2022-25314","CVE-2022-25315","CVE-2022-26488","CVE-2022-27774","CVE-2022-27775","CVE-2022-27776","CVE-2022-27778","CVE-2022-27779","CVE-2022-27780","CVE-2022-27781","CVE-2022-27782","CVE-2022-27943","CVE-2022-28321","CVE-2022-29155","CVE-2022-29824","CVE-2022-30115","CVE-2022-32205","CVE-2022-32206","CVE-2022-32207","CVE-2022-32208","CVE-2022-32221","CVE-2022-35252","CVE-2022-35260","CVE-2022-35737","CVE-2022-37434","CVE-2022-37454","CVE-2022-40303","CVE-2022-40304","CVE-2022-40674","CVE-2022-42898","CVE-2022-42915","CVE-2022-42916","CVE-2022-43551","CVE-2022-43552","CVE-2022-43680","CVE-2022-45061","CVE-2022-45873","CVE-2022-46908","CVE-2022-48303","CVE-2022-48522","CVE-2022-48560","CVE-2023-0215","CVE-2023-0286","CVE-2023-0361","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0687","CVE-2023-1077","CVE-2023-1206","CVE-2023-2650","CVE-2023-2953","CVE-2023-3212","CVE-2023-3446","CVE-2023-3609","CVE-2023-3611","CVE-2023-3772","CVE-2023-3817","CVE-2023-4016","CVE-2023-4039","CVE-2023-4623","CVE-2023-4807","CVE-2023-4813","CVE-2023-4921","CVE-2023-5156","CVE-2023-5678","CVE-2023-5717","CVE-2023-5981","CVE-2023-6121","CVE-2023-6817","CVE-2023-6931","CVE-2023-6932","CVE-2023-23914","CVE-2023-23915","CVE-2023-23916","CVE-2023-24329","CVE-2023-25136","CVE-2023-25139","CVE-2023-26604","CVE-2023-27371","CVE-2023-27533","CVE-2023-27534","CVE-2023-27535","CVE-2023-27536","CVE-2023-27537","CVE-2023-27538","CVE-2023-28484","CVE-2023-29383","CVE-2023-29469","CVE-2023-29491","CVE-2023-29499","CVE-2023-31085","CVE-2023-32611","CVE-2023-32636","CVE-2023-32643","CVE-2023-32665","CVE-2023-34319","CVE-2023-34969","CVE-2023-35001","CVE-2023-35945","CVE-2023-38408","CVE-2023-39128","CVE-2023-39189","CVE-2023-39192","CVE-2023-39193","CVE-2023-39194","CVE-2023-39615","CVE-2023-40283","CVE-2023-42754","CVE-2023-42755","CVE-2023-45322","CVE-2023-45853","CVE-2023-45871","CVE-2023-45898","CVE-2023-45918","CVE-2023-46862","CVE-2023-52425","CVE-2023-52426","CVE-2023-52444","CVE-2023-52464","CVE-2023-52612","CVE-2023-52622","CVE-2023-52675","CVE-2023-52699","CVE-2024-0584","CVE-2024-2004","CVE-2024-2236","CVE-2024-2379","CVE-2024-2398","CVE-2024-2466","CVE-2024-2511","CVE-2024-5535","CVE-2024-5742","CVE-2024-6409","CVE-2024-7264","CVE-2024-8096","CVE-2024-8176","CVE-2024-9143","CVE-2024-11053","CVE-2024-26645","CVE-2024-26671","CVE-2024-26679","CVE-2024-26772","CVE-2024-26773","CVE-2024-26777","CVE-2024-26805","CVE-2024-26835","CVE-2024-26863","CVE-2024-26878","CVE-2024-26880","CVE-2024-26898","CVE-2024-26901","CVE-2024-26923","CVE-2024-26957","CVE-2024-26973","CVE-2024-27020","CVE-2024-27032","CVE-2024-27065","CVE-2024-27074","CVE-2024-28182","CVE-2024-28757","CVE-2024-28834","CVE-2024-28835","CVE-2024-33621","CVE-2024-34459","CVE-2024-35807","CVE-2024-35809","CVE-2024-35830","CVE-2024-35888","CVE-2024-35910","CVE-2024-35925","CVE-2024-35944","CVE-2024-36017","CVE-2024-36286","CVE-2024-36484","CVE-2024-36904","CVE-2024-36905","CVE-2024-36934","CVE-2024-37356","CVE-2024-38596","CVE-2024-38598","CVE-2024-38612","CVE-2024-38621","CVE-2024-38780","CVE-2024-39292","CVE-2024-39469","CVE-2024-39487","CVE-2024-39489","CVE-2024-40901","CVE-2024-40959","CVE-2024-41046","CVE-2024-42070","CVE-2024-42096","CVE-2024-42106","CVE-2024-42131","CVE-2024-42154","CVE-2024-43871","CVE-2024-44944","CVE-2024-44965","CVE-2024-46743","CVE-2024-46745","CVE-2024-46750","CVE-2024-47684","CVE-2024-47701","CVE-2024-47707","CVE-2024-47737","CVE-2024-48881","CVE-2024-49881","CVE-2024-49884","CVE-2024-49948","CVE-2024-49949","CVE-2024-49952","CVE-2024-49982","CVE-2024-49997","CVE-2024-50006","CVE-2024-50040","CVE-2024-50045","CVE-2024-50251","CVE-2024-50262","CVE-2024-50299","CVE-2024-50301","CVE-2024-50602","CVE-2024-52332","CVE-2024-52533","CVE-2024-53057","CVE-2024-53124","CVE-2024-53140","CVE-2024-53164","CVE-2024-53165","CVE-2024-53217","CVE-2024-56433","CVE-2024-56569","CVE-2024-56570","CVE-2024-56600","CVE-2024-56601","CVE-2024-56606","CVE-2024-56644","CVE-2024-56650","CVE-2024-56770","CVE-2024-56779","CVE-2024-56780","CVE-2024-57884","CVE-2024-57901","CVE-2025-0167","CVE-2025-0395","CVE-2025-0665","CVE-2025-0725","CVE-2025-1390","CVE-2025-3277","CVE-2025-3360","CVE-2025-21694","CVE-2025-26466","CVE-2025-29087","CVE-2025-29088","CVE-2025-32728"]},{"id":"NCSC-2025-0023","title":"Kwetsbaarheden verholpen in Oracle PeopleSoft","vulnerabilityIds":["CVE-2020-22218","CVE-2023-48795","CVE-2024-0397","CVE-2024-2511","CVE-2024-4030","CVE-2024-4032","CVE-2024-4603","CVE-2024-4741","CVE-2024-5535","CVE-2024-6119","CVE-2024-6232","CVE-2024-7592","CVE-2024-22018","CVE-2024-22019","CVE-2024-22020","CVE-2024-27280","CVE-2024-27281","CVE-2024-27282","CVE-2024-28849","CVE-2024-29025","CVE-2024-35195","CVE-2024-36137","CVE-2024-36138","CVE-2024-37372","CVE-2024-37891","CVE-2024-38998","CVE-2024-38999","CVE-2025-21530","CVE-2025-21537","CVE-2025-21539","CVE-2025-21545","CVE-2025-21561","CVE-2025-21562","CVE-2025-21563"]},{"id":"RHSA-2024:0789","title":"Red Hat Security Advisory: Red Hat Build of Apache Camel 4.0 for Quarkus 3.2 release (RHBQ 3.2.10.Final)","vulnerabilityIds":["CVE-2023-4043","CVE-2023-44483","CVE-2023-48795","CVE-2023-51074"]},{"id":"RHSA-2026:79101","title":"Red Hat Security Advisory: Red Hat Ceph Storage 8.1 security and bug fix updates","vulnerabilityIds":["CVE-2023-48795","CVE-2024-48916","CVE-2025-30156","CVE-2026-39944","CVE-2026-50152","CVE-2026-54330"]},{"id":"openSUSE-SU-2024:13834-1","title":"etcd-for-k8s1.27-3.5.12-1.1 on GA media","vulnerabilityIds":["CVE-2023-47108","CVE-2023-48795"]},{"id":"openSUSE-SU-2024:0005-1","title":"Security update for putty","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:0954","title":"Red Hat Security Advisory: Red Hat OpenShift for Windows Containers 10.15.0 security update","vulnerabilityIds":["CVE-2023-5528","CVE-2023-39325","CVE-2023-48795"]},{"id":"WID-SEC-W-2024-3198","title":"Oracle SQL Developer: Schwachstelle gefährdet Integrität","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2023:7197","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security and extras update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-45142","CVE-2023-47108","CVE-2023-48795","CVE-2023-49569"]},{"id":"RHSA-2024:4959","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.34 security update","vulnerabilityIds":["CVE-2023-37788","CVE-2023-48795"]},{"id":"RHBA-2024:1127","title":"Red Hat Bug Fix Advisory: libssh bug fix update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13518-1","title":"putty-0.80-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2024-0411","title":"Kwetsbaarheden verholpen in Oracle Database producten","vulnerabilityIds":["CVE-2022-1471","CVE-2022-34169","CVE-2022-36033","CVE-2022-37454","CVE-2022-38136","CVE-2022-40196","CVE-2022-41342","CVE-2022-42919","CVE-2022-45061","CVE-2022-46337","CVE-2023-2976","CVE-2023-4043","CVE-2023-4759","CVE-2023-4863","CVE-2023-5072","CVE-2023-26031","CVE-2023-26551","CVE-2023-26552","CVE-2023-26553","CVE-2023-26554","CVE-2023-26555","CVE-2023-28484","CVE-2023-29469","CVE-2023-33201","CVE-2023-37920","CVE-2023-39410","CVE-2023-44487","CVE-2023-44981","CVE-2023-45288","CVE-2023-48795","CVE-2023-49083","CVE-2023-51384","CVE-2023-51385","CVE-2023-52425","CVE-2023-52426","CVE-2024-1874","CVE-2024-2408","CVE-2024-2511","CVE-2024-4577","CVE-2024-4603","CVE-2024-4741","CVE-2024-5458","CVE-2024-5535","CVE-2024-5585","CVE-2024-6119","CVE-2024-6232","CVE-2024-7264","CVE-2024-7592","CVE-2024-21131","CVE-2024-21138","CVE-2024-21140","CVE-2024-21144","CVE-2024-21145","CVE-2024-21147","CVE-2024-21233","CVE-2024-21242","CVE-2024-21251","CVE-2024-21261","CVE-2024-22018","CVE-2024-22020","CVE-2024-22201","CVE-2024-23807","CVE-2024-23944","CVE-2024-24989","CVE-2024-24990","CVE-2024-25710","CVE-2024-26130","CVE-2024-26308","CVE-2024-27983","CVE-2024-28182","CVE-2024-28849","CVE-2024-28887","CVE-2024-29025","CVE-2024-29131","CVE-2024-29133","CVE-2024-31079","CVE-2024-32760","CVE-2024-34161","CVE-2024-34750","CVE-2024-35200","CVE-2024-36137","CVE-2024-36138","CVE-2024-36387","CVE-2024-37370","CVE-2024-37371","CVE-2024-37372","CVE-2024-38356","CVE-2024-38357","CVE-2024-38472","CVE-2024-38473","CVE-2024-38474","CVE-2024-38475","CVE-2024-38476","CVE-2024-38477","CVE-2024-38998","CVE-2024-38999","CVE-2024-39573","CVE-2024-39884","CVE-2024-40725","CVE-2024-40898","CVE-2024-45490","CVE-2024-45491","CVE-2024-45492","CVE-2024-45801"]},{"id":"NCSC-2025-0020","title":"Kwetsbaarheden verholpen in Oracle Database producten","vulnerabilityIds":["CVE-2024-38998","CVE-2024-38999","CVE-2024-45490","CVE-2024-45491","CVE-2024-45492","CVE-2024-45772","CVE-2024-47554","CVE-2024-47561","CVE-2024-50379","CVE-2024-52316","CVE-2024-54677","CVE-2024-56337","CVE-2025-21553","CVE-2025-21557","CVE-2022-26345","CVE-2023-27043","CVE-2023-36730","CVE-2023-36785","CVE-2023-48795","CVE-2023-52428","CVE-2024-2961","CVE-2024-4030","CVE-2024-4032","CVE-2024-6232","CVE-2024-6763","CVE-2024-6923","CVE-2024-7254","CVE-2024-7592","CVE-2024-8088","CVE-2024-8927","CVE-2024-11053","CVE-2024-21211","CVE-2024-22262","CVE-2024-24789","CVE-2024-24790","CVE-2024-24791","CVE-2024-28757","CVE-2024-33599","CVE-2024-33600","CVE-2024-33601","CVE-2024-33602","CVE-2024-38819","CVE-2024-38820"]},{"id":"RHSA-2024:0625","title":"Red Hat Security Advisory: libssh security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13517-1","title":"openssh-9.3p2-5.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2024:0008-1","title":"Security update for proftpd","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51713"]},{"id":"RHSA-2024:3636","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-22201","CVE-2024-23899","CVE-2024-23900","CVE-2024-24786","CVE-2024-28149","CVE-2024-34144","CVE-2024-34145"]},{"id":"openSUSE-SU-2024:13569-1","title":"rclone-1.65.1-1.1 on GA media","vulnerabilityIds":["CVE-2023-45286","CVE-2023-48795"]},{"id":"openSUSE-SU-2023:0421-1","title":"Security update for proftpd","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2025:15487-1","title":"cheat-4.4.2-2.1 on GA media","vulnerabilityIds":["CVE-2023-48795","CVE-2025-21613","CVE-2025-21614","CVE-2025-22869","CVE-2025-22870"]},{"id":"WID-SEC-W-2024-0564","title":"Jenkins: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-48795","CVE-2024-2215","CVE-2024-2216","CVE-2024-28149","CVE-2024-28150","CVE-2024-28151","CVE-2024-28152","CVE-2024-28153","CVE-2024-28154","CVE-2024-28155","CVE-2024-28156","CVE-2024-28157","CVE-2024-28158","CVE-2024-28159","CVE-2024-28160","CVE-2024-28161","CVE-2024-28162"]},{"id":"RHSA-2024:4010","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.31 security update","vulnerabilityIds":["CVE-2023-45288","CVE-2023-48795","CVE-2023-49568","CVE-2024-28180"]},{"id":"WID-SEC-W-2024-1248","title":"Xerox FreeFlow Print Server: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2014-10401","CVE-2014-10402","CVE-2020-22218","CVE-2020-27545","CVE-2020-28162","CVE-2020-28163","CVE-2022-22817","CVE-2022-32200","CVE-2022-34299","CVE-2022-39170","CVE-2022-40982","CVE-2022-46285","CVE-2022-46344","CVE-2023-22053","CVE-2023-27371","CVE-2023-34872","CVE-2023-38408","CVE-2023-38709","CVE-2023-39326","CVE-2023-39615","CVE-2023-40305","CVE-2023-40745","CVE-2023-41175","CVE-2023-43785","CVE-2023-43786","CVE-2023-43787","CVE-2023-43788","CVE-2023-43789","CVE-2023-4408","CVE-2023-44487","CVE-2023-45285","CVE-2023-46589","CVE-2023-46728","CVE-2023-4675","CVE-2023-46751","CVE-2023-46809","CVE-2023-46846","CVE-2023-46847","CVE-2023-46848","CVE-2023-47038","CVE-2023-47100","CVE-2023-48795","CVE-2023-49285","CVE-2023-49286","CVE-2023-49288","CVE-2023-49990","CVE-2023-49991","CVE-2023-49992","CVE-2023-49993","CVE-2023-49994","CVE-2023-50387","CVE-2023-50447","CVE-2023-50761","CVE-2023-50762","CVE-2023-50868","CVE-2023-51384","CVE-2023-51385","CVE-2023-51713","CVE-2023-51765","CVE-2023-52355","CVE-2023-52356","CVE-2023-5363","CVE-2023-5367","CVE-2023-5371","CVE-2023-5380","CVE-2023-5388","CVE-2023-5517","CVE-2023-5574","CVE-2023-5679","CVE-2023-5764","CVE-2023-5824","CVE-2023-6174","CVE-2023-6175","CVE-2023-6377","CVE-2023-6478","CVE-2023-6516","CVE-2023-6856","CVE-2023-6857","CVE-2023-6858","CVE-2023-6859","CVE-2023-6860","CVE-2023-6861","CVE-2023-6862","CVE-2023-6863","CVE-2023-6864","CVE-2023-6865","CVE-2023-6867","CVE-2024-0207","CVE-2024-0208","CVE-2024-0209","CVE-2024-0210","CVE-2024-0211","CVE-2024-0727","CVE-2024-0741","CVE-2024-0742","CVE-2024-0743","CVE-2024-0746","CVE-2024-0747","CVE-2024-0749","CVE-2024-0750","CVE-2024-0751","CVE-2024-0753","CVE-2024-0755","CVE-2024-1546","CVE-2024-1547","CVE-2024-1548","CVE-2024-1549","CVE-2024-1550","CVE-2024-1551","CVE-2024-1552","CVE-2024-1553","CVE-2024-20999","CVE-2024-21011","CVE-2024-21059","CVE-2024-21068","CVE-2024-21085","CVE-2024-21094","CVE-2024-21105","CVE-2024-21890","CVE-2024-21891","CVE-2024-21896","CVE-2024-22019","CVE-2024-22195","CVE-2024-24680","CVE-2024-24795","CVE-2024-24806","CVE-2024-25617","CVE-2024-2605","CVE-2024-2607","CVE-2024-2608","CVE-2024-2610","CVE-2024-2611","CVE-2024-2612","CVE-2024-2614","CVE-2024-2616","CVE-2024-27316"]},{"id":"ICSA-24-319-08","title":"Siemens SINEC INS","vulnerabilityIds":["CVE-2023-2975","CVE-2023-3341","CVE-2023-3446","CVE-2023-3817","CVE-2023-4236","CVE-2023-4408","CVE-2023-4807","CVE-2023-5517","CVE-2023-5678","CVE-2023-5679","CVE-2023-5680","CVE-2023-6129","CVE-2023-6237","CVE-2023-6516","CVE-2023-7104","CVE-2023-32002","CVE-2023-32003","CVE-2023-32004","CVE-2023-32005","CVE-2023-32006","CVE-2023-32558","CVE-2023-32559","CVE-2023-38552","CVE-2023-39331","CVE-2023-39332","CVE-2023-39333","CVE-2023-44487","CVE-2023-45143","CVE-2023-46809","CVE-2023-47038","CVE-2023-47039","CVE-2023-47100","CVE-2023-48795","CVE-2023-50387","CVE-2023-50868","CVE-2023-52389","CVE-2024-0232","CVE-2024-0727","CVE-2024-2511","CVE-2024-4741","CVE-2024-5535","CVE-2024-21890","CVE-2024-21891","CVE-2024-21892","CVE-2024-21896","CVE-2024-22017","CVE-2024-22019","CVE-2024-22025","CVE-2024-24758","CVE-2024-24806","CVE-2024-27980","CVE-2024-27982","CVE-2024-27983","CVE-2024-46888","CVE-2024-46889","CVE-2024-46890","CVE-2024-46891","CVE-2024-46892","CVE-2024-46894"]},{"id":"RHSA-2024:0843","title":"Red Hat Security Advisory: Release of OpenShift Serverless 1.31.1","vulnerabilityIds":["CVE-2023-6481","CVE-2023-39326","CVE-2023-48795","CVE-2023-49568","CVE-2023-49569"]},{"id":"WID-SEC-W-2024-1642","title":"Oracle Communications: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-10086","CVE-2021-29425","CVE-2021-37533","CVE-2021-41184","CVE-2022-34169","CVE-2022-36033","CVE-2022-42890","CVE-2022-48174","CVE-2023-24998","CVE-2023-33201","CVE-2023-37920","CVE-2023-44487","CVE-2023-46589","CVE-2023-48795","CVE-2023-51775","CVE-2023-52425","CVE-2023-5685","CVE-2024-0450","CVE-2024-22019","CVE-2024-22201","CVE-2024-22234","CVE-2024-22257","CVE-2024-22262","CVE-2024-23672","CVE-2024-23807","CVE-2024-23897","CVE-2024-24549","CVE-2024-25062","CVE-2024-25710","CVE-2024-26130","CVE-2024-26308","CVE-2024-27316","CVE-2024-28182","CVE-2024-28752","CVE-2024-28849","CVE-2024-29025","CVE-2024-2961","CVE-2024-34064","CVE-2024-34069","CVE-2024-6162"]},{"id":"SUSE-SU-2024:0006-1","title":"Security update for libssh2_org","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:4960","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.34 bug fix and security update","vulnerabilityIds":["CVE-2023-29483","CVE-2023-45288","CVE-2023-48795","CVE-2024-1394","CVE-2024-3727","CVE-2024-6104","CVE-2024-6409"]},{"id":"openSUSE-SU-2024:13580-1","title":"jsch-0.2.15-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"WID-SEC-W-2024-0899","title":"Oracle Fusion Middleware: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2019-0231","CVE-2019-10172","CVE-2019-13990","CVE-2021-23369","CVE-2022-1471","CVE-2022-24329","CVE-2022-25147","CVE-2022-34169","CVE-2022-34381","CVE-2022-42003","CVE-2022-45378","CVE-2022-46337","CVE-2022-48579","CVE-2023-24021","CVE-2023-2976","CVE-2023-31122","CVE-2023-33201","CVE-2023-35116","CVE-2023-35887","CVE-2023-3635","CVE-2023-37536","CVE-2023-44487","CVE-2023-46218","CVE-2023-46589","CVE-2023-48795","CVE-2023-5072","CVE-2023-52428","CVE-2024-1597","CVE-2024-20991","CVE-2024-20992","CVE-2024-21006","CVE-2024-21007","CVE-2024-21117","CVE-2024-21118","CVE-2024-21119","CVE-2024-21120","CVE-2024-23635","CVE-2024-26308"]},{"id":"SUSE-SU-2023:4946-1","title":"Security update for libssh2_org","vulnerabilityIds":["CVE-2023-48795"]},{"id":"ICSA-25-162-05","title":"Siemens SIMATIC S7-1500 CPU family","vulnerabilityIds":["CVE-2021-41617","CVE-2023-4527","CVE-2023-4806","CVE-2023-4911","CVE-2023-5363","CVE-2023-6246","CVE-2023-6779","CVE-2023-6780","CVE-2023-28531","CVE-2023-38545","CVE-2023-38546","CVE-2023-44487","CVE-2023-46218","CVE-2023-46219","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385","CVE-2023-52927","CVE-2024-2961","CVE-2024-6119","CVE-2024-6387","CVE-2024-12133","CVE-2024-12243","CVE-2024-24855","CVE-2024-26596","CVE-2024-28085","CVE-2024-33599","CVE-2024-33600","CVE-2024-33601","CVE-2024-33602","CVE-2024-34397","CVE-2024-37370","CVE-2024-37371","CVE-2024-45490","CVE-2024-45491","CVE-2024-45492","CVE-2024-50246","CVE-2024-53166","CVE-2024-57924","CVE-2024-57977","CVE-2024-57996","CVE-2024-58005","CVE-2025-3198","CVE-2025-4373","CVE-2025-4598","CVE-2025-5244","CVE-2025-5245","CVE-2025-6395","CVE-2025-7425","CVE-2025-7545","CVE-2025-7546","CVE-2025-8224","CVE-2025-9230","CVE-2025-9232","CVE-2025-11082","CVE-2025-11083","CVE-2025-11412","CVE-2025-11413","CVE-2025-11414","CVE-2025-11494","CVE-2025-11495","CVE-2025-11839","CVE-2025-11840","CVE-2025-21701","CVE-2025-21702","CVE-2025-21712","CVE-2025-21724","CVE-2025-21728","CVE-2025-21745","CVE-2025-21756","CVE-2025-21758","CVE-2025-21765","CVE-2025-21766","CVE-2025-21767","CVE-2025-21795","CVE-2025-21796","CVE-2025-21848","CVE-2025-21862","CVE-2025-21864","CVE-2025-21865","CVE-2025-26465","CVE-2025-31115","CVE-2025-32988","CVE-2025-32989","CVE-2025-38058","CVE-2025-38063","CVE-2025-38067","CVE-2025-38071","CVE-2025-38079","CVE-2025-38083","CVE-2025-38100","CVE-2025-38111","CVE-2025-38124","CVE-2025-38167","CVE-2025-38198","CVE-2025-38212","CVE-2025-38214","CVE-2025-38215","CVE-2025-38222","CVE-2025-38231","CVE-2025-38236","CVE-2025-38280","CVE-2025-38285","CVE-2025-38312","CVE-2025-38342","CVE-2025-38350","CVE-2025-38364","CVE-2025-38393","CVE-2025-38400","CVE-2025-38430","CVE-2025-38451","CVE-2025-38457","CVE-2025-38465","CVE-2025-38466","CVE-2025-38468","CVE-2025-38470","CVE-2025-38471","CVE-2025-38477","CVE-2025-38498","CVE-2025-38499","CVE-2025-38614","CVE-2025-38685","CVE-2025-38691","CVE-2025-38701","CVE-2025-38702","CVE-2025-38708","CVE-2025-38721","CVE-2025-38724","CVE-2025-38727","CVE-2025-39683","CVE-2025-39689","CVE-2025-39697","CVE-2025-39724","CVE-2025-39756","CVE-2025-39770","CVE-2025-39773","CVE-2025-39783","CVE-2025-39787","CVE-2025-39795","CVE-2025-39798","CVE-2025-39866","CVE-2025-39929","CVE-2025-39931","CVE-2025-39977","CVE-2025-40022","CVE-2025-46836","CVE-2025-59375","CVE-2025-66382","CVE-2026-31431"]},{"id":"WID-SEC-W-2024-1656","title":"Oracle MySQL: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2021-24112","CVE-2023-37920","CVE-2023-48795","CVE-2023-52425","CVE-2023-6129","CVE-2024-0450","CVE-2024-20996","CVE-2024-21125","CVE-2024-21127","CVE-2024-21129","CVE-2024-21130","CVE-2024-21134","CVE-2024-21135","CVE-2024-21137","CVE-2024-21142","CVE-2024-21157","CVE-2024-21159","CVE-2024-21160","CVE-2024-21162","CVE-2024-21163","CVE-2024-21165","CVE-2024-21166","CVE-2024-21170","CVE-2024-21171","CVE-2024-21173","CVE-2024-21176","CVE-2024-21177","CVE-2024-21179","CVE-2024-21185","CVE-2024-22257","CVE-2024-22262","CVE-2024-24549","CVE-2024-25062"]},{"id":"RHSA-2024:3634","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 OpenShift Jenkins security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-22201","CVE-2024-23899","CVE-2024-23900","CVE-2024-24786","CVE-2024-28149","CVE-2024-34144","CVE-2024-34145"]},{"id":"NCSC-2024-0414","title":"Kwetsbaarheden verholpen in Oracle Communications","vulnerabilityIds":["CVE-2021-37137","CVE-2022-2068","CVE-2022-2601","CVE-2022-23437","CVE-2022-36760","CVE-2023-2953","CVE-2023-3635","CVE-2023-4043","CVE-2023-5685","CVE-2023-6597","CVE-2023-6816","CVE-2023-38408","CVE-2023-43642","CVE-2023-46136","CVE-2023-48795","CVE-2023-51775","CVE-2023-52428","CVE-2024-0450","CVE-2024-2398","CVE-2024-4577","CVE-2024-4603","CVE-2024-5585","CVE-2024-5971","CVE-2024-6162","CVE-2024-6387","CVE-2024-7254","CVE-2024-7264","CVE-2024-22020","CVE-2024-22201","CVE-2024-22257","CVE-2024-22262","CVE-2024-23672","CVE-2024-23807","CVE-2024-24549","CVE-2024-25062","CVE-2024-25638","CVE-2024-26308","CVE-2024-28182","CVE-2024-28849","CVE-2024-29025","CVE-2024-29133","CVE-2024-29736","CVE-2024-29857","CVE-2024-30251","CVE-2024-31080","CVE-2024-31744","CVE-2024-32760","CVE-2024-33602","CVE-2024-34750","CVE-2024-37371","CVE-2024-37891","CVE-2024-38816","CVE-2024-39689","CVE-2024-40898","CVE-2024-41817","CVE-2024-43044","CVE-2024-45492"]},{"id":"SUSE-SU-2024:0430-1","title":"Security update for cosign","vulnerabilityIds":["CVE-2023-48795"]},{"id":"SSA-794697","title":"SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.1","vulnerabilityIds":["CVE-2020-12762","CVE-2021-3759","CVE-2021-4037","CVE-2021-33655","CVE-2021-44879","CVE-2022-0171","CVE-2022-1012","CVE-2022-1015","CVE-2022-1184","CVE-2022-1292","CVE-2022-1343","CVE-2022-1434","CVE-2022-1462","CVE-2022-1473","CVE-2022-1679","CVE-2022-1852","CVE-2022-1882","CVE-2022-2068","CVE-2022-2078","CVE-2022-2097","CVE-2022-2153","CVE-2022-2274","CVE-2022-2327","CVE-2022-2503","CVE-2022-2586","CVE-2022-2588","CVE-2022-2602","CVE-2022-2663","CVE-2022-2905","CVE-2022-2959","CVE-2022-2978","CVE-2022-3028","CVE-2022-3104","CVE-2022-3115","CVE-2022-3169","CVE-2022-3303","CVE-2022-3521","CVE-2022-3524","CVE-2022-3534","CVE-2022-3545","CVE-2022-3564","CVE-2022-3565","CVE-2022-3586","CVE-2022-3594","CVE-2022-3606","CVE-2022-3621","CVE-2022-3625","CVE-2022-3628","CVE-2022-3629","CVE-2022-3633","CVE-2022-3635","CVE-2022-3646","CVE-2022-3649","CVE-2022-4095","CVE-2022-4129","CVE-2022-4139","CVE-2022-4269","CVE-2022-4304","CVE-2022-4450","CVE-2022-4662","CVE-2022-20421","CVE-2022-20422","CVE-2022-20566","CVE-2022-20572","CVE-2022-21123","CVE-2022-21125","CVE-2022-21166","CVE-2022-21505","CVE-2022-26373","CVE-2022-32250","CVE-2022-32296","CVE-2022-34918","CVE-2022-36123","CVE-2022-36280","CVE-2022-36879","CVE-2022-36946","CVE-2022-39188","CVE-2022-39190","CVE-2022-40307","CVE-2022-40768","CVE-2022-41218","CVE-2022-41222","CVE-2022-41674","CVE-2022-41849","CVE-2022-41850","CVE-2022-42328","CVE-2022-42329","CVE-2022-42432","CVE-2022-42703","CVE-2022-42719","CVE-2022-42720","CVE-2022-42721","CVE-2022-42722","CVE-2022-42895","CVE-2022-42896","CVE-2022-43750","CVE-2022-47518","CVE-2022-47520","CVE-2022-47929","CVE-2022-47946","CVE-2023-0215","CVE-2023-0286","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0590","CVE-2023-1077","CVE-2023-1095","CVE-2023-1206","CVE-2023-2898","CVE-2023-3141","CVE-2023-3268","CVE-2023-3338","CVE-2023-3389","CVE-2023-3446","CVE-2023-3609","CVE-2023-3610","CVE-2023-3611","CVE-2023-3772","CVE-2023-3773","CVE-2023-3777","CVE-2023-4004","CVE-2023-4015","CVE-2023-4273","CVE-2023-4623","CVE-2023-4911","CVE-2023-4921","CVE-2023-5178","CVE-2023-5197","CVE-2023-5678","CVE-2023-5717","CVE-2023-6606","CVE-2023-6931","CVE-2023-6932","CVE-2023-7008","CVE-2023-7104","CVE-2023-23454","CVE-2023-23455","CVE-2023-23559","CVE-2023-26607","CVE-2023-31085","CVE-2023-31436","CVE-2023-32233","CVE-2023-35001","CVE-2023-35827","CVE-2023-36660","CVE-2023-37453","CVE-2023-39189","CVE-2023-39192","CVE-2023-39193","CVE-2023-39194","CVE-2023-42753","CVE-2023-42754","CVE-2023-42755","CVE-2023-45863","CVE-2023-45871","CVE-2023-48795","CVE-2023-50495","CVE-2023-51384","CVE-2023-51385","CVE-2023-51767","CVE-2024-0232","CVE-2024-0553","CVE-2024-0567","CVE-2024-0584","CVE-2024-0684","CVE-2024-22365","CVE-2024-25062"]},{"id":"WID-SEC-W-2023-3174","title":"SSH Protokoll: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13836-1","title":"etcd-for-k8s1.29-3.5.12-1.1 on GA media","vulnerabilityIds":["CVE-2023-47108","CVE-2023-48795"]},{"id":"SSA-915275","title":"SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 3","vulnerabilityIds":["CVE-2023-2975","CVE-2023-3341","CVE-2023-3446","CVE-2023-3817","CVE-2023-4236","CVE-2023-4408","CVE-2023-4807","CVE-2023-5517","CVE-2023-5678","CVE-2023-5679","CVE-2023-5680","CVE-2023-6129","CVE-2023-6237","CVE-2023-6516","CVE-2023-7104","CVE-2023-32002","CVE-2023-32003","CVE-2023-32004","CVE-2023-32005","CVE-2023-32006","CVE-2023-32558","CVE-2023-32559","CVE-2023-38552","CVE-2023-39331","CVE-2023-39332","CVE-2023-39333","CVE-2023-44487","CVE-2023-45143","CVE-2023-46809","CVE-2023-47038","CVE-2023-47039","CVE-2023-47100","CVE-2023-48795","CVE-2023-50387","CVE-2023-50868","CVE-2023-52389","CVE-2024-0232","CVE-2024-0727","CVE-2024-2511","CVE-2024-4741","CVE-2024-5535","CVE-2024-21890","CVE-2024-21891","CVE-2024-21892","CVE-2024-21896","CVE-2024-22017","CVE-2024-22019","CVE-2024-22025","CVE-2024-24758","CVE-2024-24806","CVE-2024-27980","CVE-2024-27982","CVE-2024-27983","CVE-2024-46888","CVE-2024-46889","CVE-2024-46890","CVE-2024-46891","CVE-2024-46892","CVE-2024-46894"]},{"id":"RHSA-2024:2768","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 17.1 (python-paramiko) security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"SCA-2025-0009","title":"Vulnerabilities affecting SICK TDC-E210GC","vulnerabilityIds":["CVE-2023-38408","CVE-2021-23017","CVE-2020-12062","CVE-2021-41874","CVE-2021-25217","CVE-2021-3618","CVE-2021-28041","CVE-2020-15778","CVE-2021-42650","CVE-2016-20012","CVE-2025-26465","CVE-2019-20372","CVE-2020-14145","CVE-2021-36368","CVE-2022-24961","CVE-2023-44487","CVE-2021-41617","CVE-2023-51767","CVE-2008-3844","CVE-2022-2929","CVE-2022-2928","CVE-2023-48795","CVE-2007-2768"]},{"id":"openSUSE-SU-2026:11851-1","title":"python313-asyncssh-2.24.0-1.1 on GA media","vulnerabilityIds":["CVE-2023-46445","CVE-2023-48795","CVE-2026-62949"]},{"id":"openSUSE-SU-2024:13652-1","title":"rekor-1.3.5-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"SUSE-SU-2024:0224-1","title":"Security update for apache-parent, apache-sshd","vulnerabilityIds":["CVE-2022-45047","CVE-2023-48795"]},{"id":"RHSA-2024:1675","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.16 Security update","vulnerabilityIds":["CVE-2023-1973","CVE-2023-4639","CVE-2023-48795","CVE-2024-1459","CVE-2024-1635"]},{"id":"RHSA-2024:1196","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:1192","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update","vulnerabilityIds":["CVE-2023-4043","CVE-2023-4759","CVE-2023-35887","CVE-2023-48795"]},{"id":"ICSA-23-348-10","title":"Siemens SIMATIC S7-1500","vulnerabilityIds":["CVE-2013-0340","CVE-2013-4235","CVE-2014-7209","CVE-2015-20107","CVE-2016-3189","CVE-2016-3709","CVE-2016-4658","CVE-2016-5131","CVE-2016-9318","CVE-2016-10228","CVE-2016-10739","CVE-2017-0663","CVE-2017-7375","CVE-2017-7376","CVE-2017-9047","CVE-2017-9048","CVE-2017-9049","CVE-2017-9050","CVE-2017-15422","CVE-2017-16931","CVE-2017-16932","CVE-2017-17512","CVE-2017-18258","CVE-2018-0495","CVE-2018-12886","CVE-2018-14404","CVE-2018-14567","CVE-2018-18928","CVE-2018-19591","CVE-2018-20482","CVE-2018-20843","CVE-2018-25032","CVE-2019-3855","CVE-2019-3856","CVE-2019-3857","CVE-2019-3858","CVE-2019-3859","CVE-2019-3860","CVE-2019-3861","CVE-2019-3862","CVE-2019-3863","CVE-2019-5018","CVE-2019-5094","CVE-2019-5188","CVE-2019-5435","CVE-2019-5436","CVE-2019-5443","CVE-2019-5481","CVE-2019-5482","CVE-2019-6109","CVE-2019-6110","CVE-2019-6111","CVE-2019-6488","CVE-2019-7309","CVE-2019-8457","CVE-2019-9169","CVE-2019-9636","CVE-2019-9674","CVE-2019-9740","CVE-2019-9923","CVE-2019-9936","CVE-2019-9937","CVE-2019-9947","CVE-2019-9948","CVE-2019-10160","CVE-2019-11360","CVE-2019-12290","CVE-2019-12900","CVE-2019-12904","CVE-2019-13057","CVE-2019-13565","CVE-2019-13627","CVE-2019-15847","CVE-2019-15903","CVE-2019-16056","CVE-2019-16168","CVE-2019-16905","CVE-2019-17498","CVE-2019-17543","CVE-2019-17594","CVE-2019-17595","CVE-2019-18224","CVE-2019-18276","CVE-2019-18348","CVE-2019-19126","CVE-2019-19242","CVE-2019-19244","CVE-2019-19317","CVE-2019-19603","CVE-2019-19645","CVE-2019-19646","CVE-2019-19880","CVE-2019-19906","CVE-2019-19923","CVE-2019-19924","CVE-2019-19925","CVE-2019-19926","CVE-2019-19956","CVE-2019-19959","CVE-2019-20218","CVE-2019-20367","CVE-2019-20388","CVE-2019-20795","CVE-2019-20907","CVE-2019-25013","CVE-2019-1010022","CVE-2019-1010023","CVE-2019-1010024","CVE-2019-1010025","CVE-2019-1010180","CVE-2020-1712","CVE-2020-1751","CVE-2020-1752","CVE-2020-6096","CVE-2020-7595","CVE-2020-8169","CVE-2020-8177","CVE-2020-8231","CVE-2020-8284","CVE-2020-8285","CVE-2020-8286","CVE-2020-8315","CVE-2020-8492","CVE-2020-9327","CVE-2020-10029","CVE-2020-10531","CVE-2020-10543","CVE-2020-10735","CVE-2020-10878","CVE-2020-11501","CVE-2020-11655","CVE-2020-11656","CVE-2020-12062","CVE-2020-12243","CVE-2020-12723","CVE-2020-12762","CVE-2020-13434","CVE-2020-13435","CVE-2020-13529","CVE-2020-13630","CVE-2020-13631","CVE-2020-13632","CVE-2020-13776","CVE-2020-13777","CVE-2020-13871","CVE-2020-14145","CVE-2020-14422","CVE-2020-15358","CVE-2020-15523","CVE-2020-15778","CVE-2020-15801","CVE-2020-19185","CVE-2020-19186","CVE-2020-19187","CVE-2020-19188","CVE-2020-19189","CVE-2020-19190","CVE-2020-19909","CVE-2020-21047","CVE-2020-21913","CVE-2020-22218","CVE-2020-24659","CVE-2020-24977","CVE-2020-25692","CVE-2020-25709","CVE-2020-25710","CVE-2020-26116","CVE-2020-27618","CVE-2020-28196","CVE-2020-29361","CVE-2020-29362","CVE-2020-29363","CVE-2020-29562","CVE-2020-29573","CVE-2020-35525","CVE-2020-35527","CVE-2020-36221","CVE-2020-36222","CVE-2020-36223","CVE-2020-36224","CVE-2020-36225","CVE-2020-36226","CVE-2020-36227","CVE-2020-36228","CVE-2020-36229","CVE-2020-36230","CVE-2021-3177","CVE-2021-3326","CVE-2021-3426","CVE-2021-3516","CVE-2021-3517","CVE-2021-3518","CVE-2021-3520","CVE-2021-3537","CVE-2021-3541","CVE-2021-3580","CVE-2021-3733","CVE-2021-3737","CVE-2021-3826","CVE-2021-3997","CVE-2021-3998","CVE-2021-3999","CVE-2021-4122","CVE-2021-4189","CVE-2021-4209","CVE-2021-20193","CVE-2021-20227","CVE-2021-20231","CVE-2021-20232","CVE-2021-20305","CVE-2021-22876","CVE-2021-22890","CVE-2021-22897","CVE-2021-22898","CVE-2021-22901","CVE-2021-22922","CVE-2021-22923","CVE-2021-22924","CVE-2021-22925","CVE-2021-22926","CVE-2021-22945","CVE-2021-22946","CVE-2021-22947","CVE-2021-23336","CVE-2021-27212","CVE-2021-27218","CVE-2021-27219","CVE-2021-27645","CVE-2021-28041","CVE-2021-28153","CVE-2021-28363","CVE-2021-28861","CVE-2021-31239","CVE-2021-32292","CVE-2021-33294","CVE-2021-33560","CVE-2021-33574","CVE-2021-33910","CVE-2021-35942","CVE-2021-36084","CVE-2021-36085","CVE-2021-36086","CVE-2021-36087","CVE-2021-36222","CVE-2021-36690","CVE-2021-37600","CVE-2021-37750","CVE-2021-38604","CVE-2021-43396","CVE-2021-43618","CVE-2021-44879","CVE-2021-45960","CVE-2021-46143","CVE-2021-46195","CVE-2021-46828","CVE-2021-46848","CVE-2022-0391","CVE-2022-0563","CVE-2022-0778","CVE-2022-1271","CVE-2022-1292","CVE-2022-1304","CVE-2022-1343","CVE-2022-1434","CVE-2022-1473","CVE-2022-2068","CVE-2022-2097","CVE-2022-2274","CVE-2022-2509","CVE-2022-3715","CVE-2022-3821","CVE-2022-4304","CVE-2022-4450","CVE-2022-22576","CVE-2022-22822","CVE-2022-22823","CVE-2022-22824","CVE-2022-22825","CVE-2022-22826","CVE-2022-22827","CVE-2022-23218","CVE-2022-23219","CVE-2022-23308","CVE-2022-23852","CVE-2022-23990","CVE-2022-24407","CVE-2022-25235","CVE-2022-25236","CVE-2022-25313","CVE-2022-25314","CVE-2022-25315","CVE-2022-26488","CVE-2022-27774","CVE-2022-27775","CVE-2022-27776","CVE-2022-27778","CVE-2022-27779","CVE-2022-27780","CVE-2022-27781","CVE-2022-27782","CVE-2022-27943","CVE-2022-28321","CVE-2022-29155","CVE-2022-29824","CVE-2022-30115","CVE-2022-32205","CVE-2022-32206","CVE-2022-32207","CVE-2022-32208","CVE-2022-32221","CVE-2022-35252","CVE-2022-35260","CVE-2022-35737","CVE-2022-37434","CVE-2022-37454","CVE-2022-40303","CVE-2022-40304","CVE-2022-40674","CVE-2022-42898","CVE-2022-42915","CVE-2022-42916","CVE-2022-43551","CVE-2022-43552","CVE-2022-43680","CVE-2022-45061","CVE-2022-45873","CVE-2022-46908","CVE-2022-48303","CVE-2022-48522","CVE-2022-48560","CVE-2023-0215","CVE-2023-0286","CVE-2023-0361","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0687","CVE-2023-1077","CVE-2023-1206","CVE-2023-2650","CVE-2023-2953","CVE-2023-3212","CVE-2023-3446","CVE-2023-3609","CVE-2023-3611","CVE-2023-3772","CVE-2023-3817","CVE-2023-4016","CVE-2023-4039","CVE-2023-4623","CVE-2023-4807","CVE-2023-4813","CVE-2023-4921","CVE-2023-5156","CVE-2023-5678","CVE-2023-5717","CVE-2023-5981","CVE-2023-6121","CVE-2023-6817","CVE-2023-6931","CVE-2023-6932","CVE-2023-23914","CVE-2023-23915","CVE-2023-23916","CVE-2023-24329","CVE-2023-25136","CVE-2023-25139","CVE-2023-26604","CVE-2023-27371","CVE-2023-27533","CVE-2023-27534","CVE-2023-27535","CVE-2023-27536","CVE-2023-27537","CVE-2023-27538","CVE-2023-28484","CVE-2023-29383","CVE-2023-29469","CVE-2023-29491","CVE-2023-29499","CVE-2023-31085","CVE-2023-32611","CVE-2023-32636","CVE-2023-32643","CVE-2023-32665","CVE-2023-34319","CVE-2023-34969","CVE-2023-35001","CVE-2023-35945","CVE-2023-38408","CVE-2023-39128","CVE-2023-39189","CVE-2023-39192","CVE-2023-39193","CVE-2023-39194","CVE-2023-39615","CVE-2023-40283","CVE-2023-42754","CVE-2023-42755","CVE-2023-45322","CVE-2023-45853","CVE-2023-45871","CVE-2023-45898","CVE-2023-45918","CVE-2023-46862","CVE-2023-52425","CVE-2023-52426","CVE-2023-52444","CVE-2023-52464","CVE-2023-52612","CVE-2023-52622","CVE-2023-52675","CVE-2023-52699","CVE-2024-0584","CVE-2024-2004","CVE-2024-2236","CVE-2024-2379","CVE-2024-2398","CVE-2024-2466","CVE-2024-2511","CVE-2024-5535","CVE-2024-5742","CVE-2024-6409","CVE-2024-7264","CVE-2024-8096","CVE-2024-8176","CVE-2024-9143","CVE-2024-11053","CVE-2024-26645","CVE-2024-26671","CVE-2024-26679","CVE-2024-26772","CVE-2024-26773","CVE-2024-26777","CVE-2024-26805","CVE-2024-26835","CVE-2024-26863","CVE-2024-26878","CVE-2024-26880","CVE-2024-26898","CVE-2024-26901","CVE-2024-26923","CVE-2024-26957","CVE-2024-26973","CVE-2024-27020","CVE-2024-27032","CVE-2024-27065","CVE-2024-27074","CVE-2024-28182","CVE-2024-28757","CVE-2024-28834","CVE-2024-28835","CVE-2024-33621","CVE-2024-34459","CVE-2024-35807","CVE-2024-35809","CVE-2024-35830","CVE-2024-35888","CVE-2024-35910","CVE-2024-35925","CVE-2024-35944","CVE-2024-36017","CVE-2024-36286","CVE-2024-36484","CVE-2024-36904","CVE-2024-36905","CVE-2024-36934","CVE-2024-37356","CVE-2024-38596","CVE-2024-38598","CVE-2024-38612","CVE-2024-38621","CVE-2024-38780","CVE-2024-39292","CVE-2024-39469","CVE-2024-39487","CVE-2024-39489","CVE-2024-40901","CVE-2024-40959","CVE-2024-41046","CVE-2024-42070","CVE-2024-42096","CVE-2024-42106","CVE-2024-42131","CVE-2024-42154","CVE-2024-43871","CVE-2024-44944","CVE-2024-44965","CVE-2024-46743","CVE-2024-46745","CVE-2024-46750","CVE-2024-47684","CVE-2024-47701","CVE-2024-47707","CVE-2024-47737","CVE-2024-48881","CVE-2024-49881","CVE-2024-49884","CVE-2024-49948","CVE-2024-49949","CVE-2024-49952","CVE-2024-49982","CVE-2024-49997","CVE-2024-50006","CVE-2024-50040","CVE-2024-50045","CVE-2024-50251","CVE-2024-50262","CVE-2024-50299","CVE-2024-50301","CVE-2024-50602","CVE-2024-52332","CVE-2024-52533","CVE-2024-53057","CVE-2024-53124","CVE-2024-53140","CVE-2024-53164","CVE-2024-53165","CVE-2024-53217","CVE-2024-56433","CVE-2024-56569","CVE-2024-56570","CVE-2024-56600","CVE-2024-56601","CVE-2024-56606","CVE-2024-56644","CVE-2024-56650","CVE-2024-56770","CVE-2024-56779","CVE-2024-56780","CVE-2024-57884","CVE-2024-57901","CVE-2025-0167","CVE-2025-0395","CVE-2025-0665","CVE-2025-0725","CVE-2025-1390","CVE-2025-3277","CVE-2025-3360","CVE-2025-21694","CVE-2025-26466","CVE-2025-29087","CVE-2025-29088","CVE-2025-32728"]},{"id":"RHSA-2024:4329","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.32 bug fix and security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-5037"]},{"id":"openSUSE-SU-2024:13638-1","title":"libssh-config-0.10.6-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795","CVE-2023-6004","CVE-2023-6918"]},{"id":"SSA-769027","title":"SSA-769027: Multiple Vulnerabilities fixed in SCALANCE W700 IEEE 802.11ax devices before V3.0.0","vulnerabilityIds":["CVE-2022-2588","CVE-2022-2663","CVE-2022-3524","CVE-2022-4304","CVE-2022-4450","CVE-2022-39188","CVE-2022-39842","CVE-2022-40303","CVE-2022-40304","CVE-2022-43750","CVE-2022-47069","CVE-2022-47929","CVE-2023-0045","CVE-2023-0215","CVE-2023-0286","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0590","CVE-2023-1073","CVE-2023-1074","CVE-2023-1118","CVE-2023-1206","CVE-2023-1380","CVE-2023-1670","CVE-2023-2194","CVE-2023-3446","CVE-2023-3611","CVE-2023-4623","CVE-2023-4921","CVE-2023-5363","CVE-2023-5678","CVE-2023-5717","CVE-2023-6129","CVE-2023-6237","CVE-2023-7250","CVE-2023-23454","CVE-2023-23455","CVE-2023-23559","CVE-2023-26545","CVE-2023-28484","CVE-2023-28578","CVE-2023-29469","CVE-2023-31085","CVE-2023-31315","CVE-2023-35001","CVE-2023-39192","CVE-2023-39193","CVE-2023-42754","CVE-2023-43522","CVE-2023-44320","CVE-2023-44322","CVE-2023-45853","CVE-2023-45863","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385","CVE-2024-0727","CVE-2024-2511","CVE-2024-4603","CVE-2024-4741","CVE-2024-5535","CVE-2024-6119","CVE-2024-9143","CVE-2024-23814","CVE-2024-26306","CVE-2024-33016","CVE-2024-50560","CVE-2024-50561","CVE-2024-50572","CVE-2025-24499","CVE-2025-24532"]},{"id":"RHSA-2024:1130","title":"Red Hat Security Advisory: openssh security update","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51385"]},{"id":"RHSA-2026:79243","title":"Red Hat Security Advisory: Red Hat Ceph Storage","vulnerabilityIds":["CVE-2021-43565","CVE-2022-27191","CVE-2023-48795","CVE-2024-48916","CVE-2025-30156","CVE-2026-21721","CVE-2026-39944","CVE-2026-41680","CVE-2026-50152","CVE-2026-54330"]},{"id":"SUSE-SU-2023:4902-1","title":"Security update for openssh","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:2988","title":"Red Hat Security Advisory: container-tools:rhel8 security update","vulnerabilityIds":["CVE-2018-25091","CVE-2021-33198","CVE-2021-34558","CVE-2022-2879","CVE-2022-2880","CVE-2022-41715","CVE-2023-29409","CVE-2023-39318","CVE-2023-39319","CVE-2023-39321","CVE-2023-39322","CVE-2023-39326","CVE-2023-45287","CVE-2023-45803","CVE-2023-48795","CVE-2024-23650"]},{"id":"RHSA-2024:4597","title":"Red Hat Security Advisory: Red Hat Product OCP Tools 4.15 OpenShift Jenkins security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-21626","CVE-2024-22201","CVE-2024-23899","CVE-2024-23900","CVE-2024-24786","CVE-2024-28149","CVE-2024-34144","CVE-2024-34145"]},{"id":"NCSC-2025-0025","title":"Kwetsbaarheden verholpen in Oracle Financial Services","vulnerabilityIds":["CVE-2022-34169","CVE-2023-26031","CVE-2023-33201","CVE-2023-39410","CVE-2023-44483","CVE-2023-48795","CVE-2023-51074","CVE-2023-52070","CVE-2024-28219","CVE-2024-34064","CVE-2024-34750","CVE-2024-35195","CVE-2024-38819","CVE-2024-38820","CVE-2024-38827","CVE-2024-38998","CVE-2024-38999","CVE-2024-45490","CVE-2024-45491","CVE-2024-45492","CVE-2025-21550"]},{"id":"RHSA-2024:5433","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.35 security update","vulnerabilityIds":["CVE-2023-45142","CVE-2023-45290","CVE-2023-47108","CVE-2023-48795","CVE-2024-6104","CVE-2024-24790","CVE-2024-34064","CVE-2024-36971"]},{"id":"RHSA-2024:0429","title":"Red Hat Security Advisory: openssh security update","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51385"]},{"id":"RHSA-2025:4664","title":"Red Hat Security Advisory: Red Hat Ceph Storage 7.1 security, bug fix, and enhancement updates","vulnerabilityIds":["CVE-2023-23934","CVE-2023-25577","CVE-2023-46446","CVE-2023-48795","CVE-2024-24790","CVE-2024-34069","CVE-2024-42353","CVE-2024-47191","CVE-2024-48916"]},{"id":"SSA-082556","title":"SSA-082556: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1.5","vulnerabilityIds":["CVE-2021-41617","CVE-2023-4527","CVE-2023-4806","CVE-2023-4911","CVE-2023-5363","CVE-2023-6246","CVE-2023-6779","CVE-2023-6780","CVE-2023-28531","CVE-2023-38545","CVE-2023-38546","CVE-2023-44487","CVE-2023-46218","CVE-2023-46219","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385","CVE-2023-52927","CVE-2024-2961","CVE-2024-6119","CVE-2024-6387","CVE-2024-12133","CVE-2024-12243","CVE-2024-24855","CVE-2024-26596","CVE-2024-28085","CVE-2024-33599","CVE-2024-33600","CVE-2024-33601","CVE-2024-33602","CVE-2024-34397","CVE-2024-37370","CVE-2024-37371","CVE-2024-45490","CVE-2024-45491","CVE-2024-45492","CVE-2024-47736","CVE-2024-47809","CVE-2024-49998","CVE-2024-50246","CVE-2024-50298","CVE-2024-53166","CVE-2024-56719","CVE-2024-57924","CVE-2024-57977","CVE-2024-57996","CVE-2024-58005","CVE-2025-3198","CVE-2025-4373","CVE-2025-4598","CVE-2025-5244","CVE-2025-5245","CVE-2025-6395","CVE-2025-7425","CVE-2025-7545","CVE-2025-7546","CVE-2025-8224","CVE-2025-9230","CVE-2025-9232","CVE-2025-11082","CVE-2025-11083","CVE-2025-11412","CVE-2025-11413","CVE-2025-11414","CVE-2025-11494","CVE-2025-11495","CVE-2025-11839","CVE-2025-11840","CVE-2025-21676","CVE-2025-21682","CVE-2025-21701","CVE-2025-21702","CVE-2025-21712","CVE-2025-21724","CVE-2025-21728","CVE-2025-21745","CVE-2025-21756","CVE-2025-21758","CVE-2025-21765","CVE-2025-21766","CVE-2025-21767","CVE-2025-21795","CVE-2025-21796","CVE-2025-21848","CVE-2025-21862","CVE-2025-21864","CVE-2025-21865","CVE-2025-26465","CVE-2025-31115","CVE-2025-32988","CVE-2025-32989","CVE-2025-37945","CVE-2025-37980","CVE-2025-38058","CVE-2025-38063","CVE-2025-38067","CVE-2025-38071","CVE-2025-38079","CVE-2025-38083","CVE-2025-38100","CVE-2025-38111","CVE-2025-38124","CVE-2025-38162","CVE-2025-38167","CVE-2025-38192","CVE-2025-38198","CVE-2025-38201","CVE-2025-38212","CVE-2025-38214","CVE-2025-38215","CVE-2025-38222","CVE-2025-38231","CVE-2025-38236","CVE-2025-38280","CVE-2025-38285","CVE-2025-38312","CVE-2025-38342","CVE-2025-38350","CVE-2025-38364","CVE-2025-38393","CVE-2025-38400","CVE-2025-38430","CVE-2025-38451","CVE-2025-38457","CVE-2025-38465","CVE-2025-38466","CVE-2025-38468","CVE-2025-38470","CVE-2025-38471","CVE-2025-38477","CVE-2025-38498","CVE-2025-38499","CVE-2025-38614","CVE-2025-38685","CVE-2025-38691","CVE-2025-38701","CVE-2025-38702","CVE-2025-38704","CVE-2025-38708","CVE-2025-38721","CVE-2025-38724","CVE-2025-38727","CVE-2025-39683","CVE-2025-39689","CVE-2025-39697","CVE-2025-39724","CVE-2025-39748","CVE-2025-39756","CVE-2025-39764","CVE-2025-39770","CVE-2025-39773","CVE-2025-39783","CVE-2025-39787","CVE-2025-39795","CVE-2025-39798","CVE-2025-39866","CVE-2025-39929","CVE-2025-39931","CVE-2025-39977","CVE-2025-40022","CVE-2025-40135","CVE-2025-40219","CVE-2025-40261","CVE-2025-46836","CVE-2025-59375","CVE-2025-66382","CVE-2025-68206","CVE-2025-68265","CVE-2025-71161","CVE-2025-71221","CVE-2025-71265","CVE-2025-71266","CVE-2025-71267","CVE-2026-3904","CVE-2026-4046","CVE-2026-4437","CVE-2026-4438","CVE-2026-5435","CVE-2026-5450","CVE-2026-5928","CVE-2026-6238","CVE-2026-23100","CVE-2026-23111","CVE-2026-23113","CVE-2026-23154","CVE-2026-23204","CVE-2026-23231","CVE-2026-23242","CVE-2026-23243","CVE-2026-23245","CVE-2026-23270","CVE-2026-23271","CVE-2026-23273","CVE-2026-23274","CVE-2026-23277","CVE-2026-23284","CVE-2026-23287","CVE-2026-23290","CVE-2026-23293","CVE-2026-23300","CVE-2026-23304","CVE-2026-23319","CVE-2026-23321","CVE-2026-23335","CVE-2026-23340","CVE-2026-23343","CVE-2026-23351","CVE-2026-23359","CVE-2026-23365","CVE-2026-23368","CVE-2026-23370","CVE-2026-23378","CVE-2026-23379","CVE-2026-23381","CVE-2026-23391","CVE-2026-23392","CVE-2026-23397","CVE-2026-23398","CVE-2026-23414","CVE-2026-23422","CVE-2026-23434","CVE-2026-23438","CVE-2026-23439","CVE-2026-23446","CVE-2026-23449","CVE-2026-23450","CVE-2026-23452","CVE-2026-23454","CVE-2026-23455","CVE-2026-23456","CVE-2026-23457","CVE-2026-23458","CVE-2026-23463","CVE-2026-23474","CVE-2026-23475","CVE-2026-31389","CVE-2026-31391","CVE-2026-31396","CVE-2026-31402","CVE-2026-31403","CVE-2026-31411","CVE-2026-31414","CVE-2026-31415","CVE-2026-31416","CVE-2026-31417","CVE-2026-31418","CVE-2026-31421","CVE-2026-31422","CVE-2026-31423","CVE-2026-31424","CVE-2026-31427","CVE-2026-31428","CVE-2026-31431","CVE-2026-31441","CVE-2026-31446","CVE-2026-31447","CVE-2026-31448","CVE-2026-31450","CVE-2026-31452","CVE-2026-31466","CVE-2026-31469","CVE-2026-31485","CVE-2026-31494","CVE-2026-31495","CVE-2026-31496","CVE-2026-31503","CVE-2026-31504","CVE-2026-31507","CVE-2026-31508","CVE-2026-31515","CVE-2026-31518","CVE-2026-31521","CVE-2026-31533","CVE-2026-31546","CVE-2026-31555","CVE-2026-31563","CVE-2026-31565","CVE-2026-31628","CVE-2026-31634","CVE-2026-31649","CVE-2026-31651","CVE-2026-31658","CVE-2026-31664","CVE-2026-31665","CVE-2026-31669","CVE-2026-31670","CVE-2026-31671","CVE-2026-31674","CVE-2026-31680","CVE-2026-31682","CVE-2026-31737","CVE-2026-31752","CVE-2026-31761","CVE-2026-31768","CVE-2026-32776","CVE-2026-32777","CVE-2026-32778","CVE-2026-40355","CVE-2026-41080","CVE-2026-41989","CVE-2026-43011","CVE-2026-43024","CVE-2026-43025","CVE-2026-43026","CVE-2026-43027","CVE-2026-43028","CVE-2026-43030","CVE-2026-43033","CVE-2026-43035","CVE-2026-43038","CVE-2026-43040","CVE-2026-43057","CVE-2026-43284","CVE-2026-45186","CVE-2026-46174","CVE-2026-46300"]},{"id":"WID-SEC-W-2024-1701","title":"Aruba EdgeConnect: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2024-33519","CVE-2024-41133","CVE-2024-41134","CVE-2024-41135","CVE-2024-41136","CVE-2023-51385","CVE-2023-48795"]},{"id":"SUSE-SU-2023:4904-1","title":"Security update for openssh","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:0499","title":"Red Hat Security Advisory: libssh security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"WID-SEC-W-2024-1630","title":"Oracle NoSQL Database: Schwachstelle gefährdet Integrität","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13539-1","title":"proftpd-1.3.8b-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13776-1","title":"trilead-ssh2-217.293.v56de4d4d3515-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"SUSE-SU-2024:0035-1","title":"Security update for python-paramiko","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2023:7198","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 bug fix and security update","vulnerabilityIds":["CVE-2023-3978","CVE-2023-26159","CVE-2023-30551","CVE-2023-37788","CVE-2023-39325","CVE-2023-39326","CVE-2023-40577","CVE-2023-44487","CVE-2023-45142","CVE-2023-45285","CVE-2023-47108","CVE-2023-48795","CVE-2023-49569"]},{"id":"RHSA-2024:1193","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update","vulnerabilityIds":["CVE-2023-4043","CVE-2023-4759","CVE-2023-35887","CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13646-1","title":"cosign-2.2.3-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2024-0294","title":"Kwetsbaarheden verholpen in Oracle Communications","vulnerabilityIds":["CVE-2019-10086","CVE-2021-29425","CVE-2021-37533","CVE-2021-41184","CVE-2022-34169","CVE-2022-36033","CVE-2022-42890","CVE-2022-48174","CVE-2023-5685","CVE-2023-24998","CVE-2023-33201","CVE-2023-37920","CVE-2023-44487","CVE-2023-46589","CVE-2023-48795","CVE-2023-51775","CVE-2023-52425","CVE-2024-0450","CVE-2024-2961","CVE-2024-6162","CVE-2024-22019","CVE-2024-22201","CVE-2024-22234","CVE-2024-22257","CVE-2024-22262","CVE-2024-23672","CVE-2024-23807","CVE-2024-23897","CVE-2024-24549","CVE-2024-25062","CVE-2024-25710","CVE-2024-26130","CVE-2024-26308","CVE-2024-27316","CVE-2024-28182","CVE-2024-28752","CVE-2024-28849","CVE-2024-29025","CVE-2024-34064","CVE-2024-34069"]},{"id":"openSUSE-SU-2025:0003-1","title":"Security update for etcd","vulnerabilityIds":["CVE-2019-11254","CVE-2020-15106","CVE-2021-28235","CVE-2023-47108","CVE-2023-48795"]},{"id":"WID-SEC-W-2024-3195","title":"Oracle Communications: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2022-2068","CVE-2022-23437","CVE-2022-2601","CVE-2022-36760","CVE-2023-2953","CVE-2023-3635","CVE-2023-38408","CVE-2023-4043","CVE-2023-46136","CVE-2023-48795","CVE-2023-51775","CVE-2023-5685","CVE-2023-6597","CVE-2023-6816","CVE-2024-0450","CVE-2024-22020","CVE-2024-22257","CVE-2024-22262","CVE-2024-23672","CVE-2024-2398","CVE-2024-25062","CVE-2024-25638","CVE-2024-26308","CVE-2024-28182","CVE-2024-28849","CVE-2024-29025","CVE-2024-29736","CVE-2024-29857","CVE-2024-30251","CVE-2024-31080","CVE-2024-31744","CVE-2024-32760","CVE-2024-33602","CVE-2024-34750","CVE-2024-37371","CVE-2024-37891","CVE-2024-38816","CVE-2024-40898","CVE-2024-43044","CVE-2024-45492","CVE-2024-4577","CVE-2024-4603","CVE-2024-5971","CVE-2024-6162","CVE-2024-6387","CVE-2024-7254"]},{"id":"WID-SEC-W-2024-1643","title":"Oracle Communications Applications: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2020-13956","CVE-2021-29489","CVE-2021-37533","CVE-2022-34381","CVE-2023-29081","CVE-2023-35116","CVE-2023-44487","CVE-2023-46218","CVE-2023-48795","CVE-2023-5981","CVE-2024-0232","CVE-2024-22257","CVE-2024-22262","CVE-2024-23807","CVE-2024-27316","CVE-2024-29025","CVE-2024-29133"]},{"id":"msrc_CVE-2023-48795","title":"The SSH transport protocol with certain OpenSSH extensions found in OpenSSH before 9.6 and other products allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message) and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP) implemented by these extensions mishandles the handshake phase and mishandles use of sequence numbers. For example there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT Dropbear through 2022.83 Ssh before 5.1.1 in Erlang/OTP PuTTY before 0.80 AsyncSSH before 2.14.2 golang.org/x/crypto before 0.17.0 libssh before 0.10.6 libssh2 ","vulnerabilityIds":["CVE-2023-48795"]},{"id":"SCA-2025-0011","title":"Vulnerabilities affecting Endress+Hauser SSG-E210GC","vulnerabilityIds":["CVE-2023-38408","CVE-2021-23017","CVE-2020-12062","CVE-2021-41874","CVE-2021-25217","CVE-2021-3618","CVE-2021-28041","CVE-2020-15778","CVE-2021-42650","CVE-2016-20012","CVE-2025-26465","CVE-2019-20372","CVE-2020-14145","CVE-2021-36368","CVE-2022-24961","CVE-2023-44487","CVE-2021-41617","CVE-2023-51767","CVE-2008-3844","CVE-2022-2929","CVE-2022-2928","CVE-2023-48795","CVE-2007-2768"]},{"id":"WID-SEC-W-2024-1637","title":"Oracle Fusion Middleware: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2020-13956","CVE-2020-1945","CVE-2021-29425","CVE-2021-37533","CVE-2022-40152","CVE-2022-45378","CVE-2023-24998","CVE-2023-29081","CVE-2023-2976","CVE-2023-34034","CVE-2023-36478","CVE-2023-45853","CVE-2023-46750","CVE-2023-4759","CVE-2023-48795","CVE-2023-5072","CVE-2023-52425","CVE-2023-6129","CVE-2024-0853","CVE-2024-21133","CVE-2024-21175","CVE-2024-21181","CVE-2024-21182","CVE-2024-21183","CVE-2024-22201","CVE-2024-22243","CVE-2024-22259","CVE-2024-22262","CVE-2024-25062","CVE-2024-26308","CVE-2024-29025","CVE-2024-29857"]},{"id":"NCSC-2024-0303","title":"Kwetsbaarheden verholpen in Oracle MySQL","vulnerabilityIds":["CVE-2021-24112","CVE-2023-6129","CVE-2023-37920","CVE-2023-48795","CVE-2023-52425","CVE-2024-0450","CVE-2024-20996","CVE-2024-21125","CVE-2024-21127","CVE-2024-21129","CVE-2024-21130","CVE-2024-21134","CVE-2024-21135","CVE-2024-21137","CVE-2024-21142","CVE-2024-21157","CVE-2024-21159","CVE-2024-21160","CVE-2024-21162","CVE-2024-21163","CVE-2024-21165","CVE-2024-21166","CVE-2024-21170","CVE-2024-21171","CVE-2024-21173","CVE-2024-21176","CVE-2024-21177","CVE-2024-21179","CVE-2024-21185","CVE-2024-22257","CVE-2024-22262","CVE-2024-24549","CVE-2024-25062"]},{"id":"SUSE-SU-2024:0543-1","title":"Security update for libssh2_org","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:6406","title":"Red Hat Security Advisory: OpenShift Container Platform 4.14.36 security update","vulnerabilityIds":["CVE-2023-45142","CVE-2023-45288","CVE-2023-47108","CVE-2023-48795","CVE-2024-0874","CVE-2024-1737","CVE-2024-1975","CVE-2024-4076","CVE-2024-6104","CVE-2024-34069"]},{"id":"RHSA-2024:3718","title":"Red Hat Security Advisory: OpenShift Container Platform 4.17.0 bug fix and security update","vulnerabilityIds":["CVE-2023-3775","CVE-2023-5077","CVE-2023-5954","CVE-2023-48795","CVE-2024-3727","CVE-2024-7387","CVE-2024-24786","CVE-2024-24789","CVE-2024-25620","CVE-2024-28180","CVE-2024-45496"]},{"id":"RHSA-2024:1197","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2025-0187","title":"Kwetsbaarheden verholpen in Siemens producten","vulnerabilityIds":["CVE-2021-41617","CVE-2023-4527","CVE-2023-4806","CVE-2023-4911","CVE-2023-5363","CVE-2023-6246","CVE-2023-6779","CVE-2023-6780","CVE-2023-28531","CVE-2023-38545","CVE-2023-38546","CVE-2023-44487","CVE-2023-46218","CVE-2023-46219","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385","CVE-2023-52927","CVE-2024-2961","CVE-2024-6119","CVE-2024-6387","CVE-2024-12133","CVE-2024-12243","CVE-2024-24855","CVE-2024-26596","CVE-2024-28085","CVE-2024-33599","CVE-2024-33600","CVE-2024-33601","CVE-2024-33602","CVE-2024-34397","CVE-2024-37370","CVE-2024-37371","CVE-2024-41797","CVE-2024-45490","CVE-2024-45491","CVE-2024-45492","CVE-2024-50246","CVE-2024-53166","CVE-2024-57977","CVE-2024-57996","CVE-2024-58005","CVE-2025-0133","CVE-2025-4373","CVE-2025-4598","CVE-2025-21701","CVE-2025-21702","CVE-2025-21712","CVE-2025-21724","CVE-2025-21728","CVE-2025-21745","CVE-2025-21756","CVE-2025-21758","CVE-2025-21765","CVE-2025-21766","CVE-2025-21767","CVE-2025-21795","CVE-2025-21796","CVE-2025-21848","CVE-2025-21862","CVE-2025-21864","CVE-2025-21865","CVE-2025-26465","CVE-2025-31115","CVE-2025-32454","CVE-2025-40567","CVE-2025-40568","CVE-2025-40569","CVE-2025-40585","CVE-2025-46836"]},{"id":"openSUSE-SU-2024:13812-1","title":"etcd-3.5.12-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"NCSC-2024-0282","title":"Kwetsbaarheden verholpen in Siemens Producten","vulnerabilityIds":["CVE-2022-32260","CVE-2023-7066","CVE-2023-27321","CVE-2023-32735","CVE-2023-32737","CVE-2023-46720","CVE-2023-48795","CVE-2023-52237","CVE-2023-52238","CVE-2023-52891","CVE-2024-21754","CVE-2024-23111","CVE-2024-26010","CVE-2024-30321","CVE-2024-32055","CVE-2024-32056","CVE-2024-32057","CVE-2024-32058","CVE-2024-32059","CVE-2024-32060","CVE-2024-32061","CVE-2024-32062","CVE-2024-32063","CVE-2024-32064","CVE-2024-32065","CVE-2024-32066","CVE-2024-33577","CVE-2024-33653","CVE-2024-33654","CVE-2024-37996","CVE-2024-37997","CVE-2024-38278","CVE-2024-38867","CVE-2024-39567","CVE-2024-39568","CVE-2024-39569","CVE-2024-39570","CVE-2024-39571","CVE-2024-39675","CVE-2024-39865","CVE-2024-39866","CVE-2024-39867","CVE-2024-39868","CVE-2024-39869","CVE-2024-39870","CVE-2024-39871","CVE-2024-39872","CVE-2024-39873","CVE-2024-39874","CVE-2024-39875","CVE-2024-39876","CVE-2024-39888","CVE-2024-3596"]},{"id":"SUSE-SU-2024:0539-1","title":"Security update for libssh","vulnerabilityIds":["CVE-2019-14889","CVE-2020-16135","CVE-2020-1730","CVE-2021-3634","CVE-2023-1667","CVE-2023-2283","CVE-2023-48795","CVE-2023-6004","CVE-2023-6918"]},{"id":"RHSA-2024:3479","title":"Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 director Operator container images security update","vulnerabilityIds":["CVE-2023-37788","CVE-2023-39326","CVE-2023-45288","CVE-2023-48795"]},{"id":"RHSA-2024:0538","title":"Red Hat Security Advisory: libssh security update","vulnerabilityIds":["CVE-2023-1667","CVE-2023-2283","CVE-2023-48795"]},{"id":"ICSA-25-044-09","title":"Siemens SCALANCE W700 IEEE 802.11ax","vulnerabilityIds":["CVE-2022-2588","CVE-2022-2663","CVE-2022-3524","CVE-2022-4304","CVE-2022-4450","CVE-2022-39188","CVE-2022-39842","CVE-2022-40303","CVE-2022-40304","CVE-2022-43750","CVE-2022-47069","CVE-2022-47929","CVE-2023-0045","CVE-2023-0215","CVE-2023-0286","CVE-2023-0464","CVE-2023-0465","CVE-2023-0466","CVE-2023-0590","CVE-2023-1073","CVE-2023-1074","CVE-2023-1118","CVE-2023-1206","CVE-2023-1380","CVE-2023-1670","CVE-2023-2194","CVE-2023-3446","CVE-2023-3611","CVE-2023-4623","CVE-2023-4921","CVE-2023-5363","CVE-2023-5678","CVE-2023-5717","CVE-2023-6129","CVE-2023-6237","CVE-2023-7250","CVE-2023-23454","CVE-2023-23455","CVE-2023-23559","CVE-2023-26545","CVE-2023-28484","CVE-2023-28578","CVE-2023-29469","CVE-2023-31085","CVE-2023-31315","CVE-2023-35001","CVE-2023-39192","CVE-2023-39193","CVE-2023-42754","CVE-2023-43522","CVE-2023-44320","CVE-2023-44322","CVE-2023-45853","CVE-2023-45863","CVE-2023-48795","CVE-2023-51384","CVE-2023-51385","CVE-2024-0727","CVE-2024-2511","CVE-2024-4603","CVE-2024-4741","CVE-2024-5535","CVE-2024-6119","CVE-2024-9143","CVE-2024-23814","CVE-2024-26306","CVE-2024-33016","CVE-2024-50560","CVE-2024-50561","CVE-2024-50572","CVE-2025-24499","CVE-2025-24532"]},{"id":"RHSA-2024:4613","title":"Red Hat Security Advisory: OpenShift Container Platform 4.16.4 bug fix and security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-3727","CVE-2024-6104","CVE-2024-6409","CVE-2024-24788","CVE-2024-24790"]},{"id":"RHSA-2024:0606","title":"Red Hat Security Advisory: openssh security update","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51385"]},{"id":"RHSA-2024:0766","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-45142","CVE-2023-47108","CVE-2023-48795"]},{"id":"WID-SEC-W-2024-0889","title":"Oracle Support Tools: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-1370","CVE-2023-48795"]},{"id":"openSUSE-SU-2024:13515-1","title":"python310-asyncssh-2.14.2-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]},{"id":"RHSA-2024:1194","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.1 security update","vulnerabilityIds":["CVE-2023-4043","CVE-2023-4759","CVE-2023-35887","CVE-2023-48795","CVE-2024-6162","CVE-2024-41909"]},{"id":"NCSC-2024-0298","title":" Kwetsbaarheden verholpen in Oracle Fusion Middleware","vulnerabilityIds":["CVE-2020-1945","CVE-2020-13956","CVE-2021-29425","CVE-2021-37533","CVE-2022-40152","CVE-2022-45378","CVE-2023-2976","CVE-2023-4759","CVE-2023-5072","CVE-2023-6129","CVE-2023-24998","CVE-2023-29081","CVE-2023-34034","CVE-2023-36478","CVE-2023-45853","CVE-2023-46750","CVE-2023-48795","CVE-2023-52425","CVE-2024-0853","CVE-2024-21133","CVE-2024-21175","CVE-2024-21181","CVE-2024-21182","CVE-2024-21183","CVE-2024-22201","CVE-2024-22243","CVE-2024-22259","CVE-2024-22262","CVE-2024-25062","CVE-2024-26308","CVE-2024-29025","CVE-2024-29857"]},{"id":"RHSA-2023:7201","title":"Red Hat Security Advisory: OpenShift Container Platform 4.15.0 packages and security update","vulnerabilityIds":["CVE-2023-39325","CVE-2023-39326","CVE-2023-45287","CVE-2023-48795"]},{"id":"RHSA-2024:5200","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.63 bug fix and security update","vulnerabilityIds":["CVE-2023-48795","CVE-2024-5037","CVE-2024-6104","CVE-2024-36971"]},{"id":"WID-SEC-W-2025-0168","title":"Oracle JD Edwards: Mehrere Schwachstellen","vulnerabilityIds":["CVE-2023-2976","CVE-2023-3961","CVE-2023-4782","CVE-2023-48795","CVE-2023-6129","CVE-2024-21245","CVE-2024-27280","CVE-2024-27983","CVE-2024-29041","CVE-2025-21507","CVE-2025-21508","CVE-2025-21509","CVE-2025-21510","CVE-2025-21511","CVE-2025-21512","CVE-2025-21513","CVE-2025-21514","CVE-2025-21515","CVE-2025-21517","CVE-2025-21524","CVE-2025-21527","CVE-2025-21538","CVE-2025-21552"]},{"id":"SUSE-SU-2025:20009-1","title":"Security update for openssh","vulnerabilityIds":["CVE-2023-48795","CVE-2023-51385","CVE-2024-39894","CVE-2024-6387"]},{"id":"openSUSE-SU-2024:13530-1","title":"ssh-audit-3.1.0-1.1 on GA media","vulnerabilityIds":["CVE-2023-48795"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2023-3093","identifiers":["EUVD-2023-3093","CVE-2023-48795","GHSA-45x7-px36-x8w8"]},"retained":false,"historicalAffected":[]},{"revision":"e3e7be2f3ad54692810a455dcb9a3575","observedAt":"2026-10-24T22:17:33.701+00:00","statement":{"source":"nvd","id":"CVE-2023-48795","aliases":[],"title":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and …","description":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.","state":0,"publishedAt":"2023-12-18T16:15:10.897+00:00","modifiedAt":"2026-10-15T01:17:10.937+00:00","affected":[],"metrics":[{"system":"CVSS 3.1 · nvd@nist.gov · Primary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","score":5.9,"severity":"MEDIUM"},{"system":"CVSS 3.1 · 134c704f-9b21-4f2e-91b3-4a467353bcc0 · Secondary","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","score":5.9,"severity":"MEDIUM"}],"references":["http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html","http://seclists.org/fulldisclosure/2024/Mar/21","http://www.openwall.com/lists/oss-security/2023/12/18/3","http://www.openwall.com/lists/oss-security/2023/12/19/5","http://www.openwall.com/lists/oss-security/2023/12/20/3","http://www.openwall.com/lists/oss-security/2024/03/06/3","http://www.openwall.com/lists/oss-security/2024/04/17/8","https://access.redhat.com/security/cve/cve-2023-48795","https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/","https://bugs.gentoo.org/920280","https://bugzilla.redhat.com/show_bug.cgi?id=2254210","https://bugzilla.suse.com/show_bug.cgi?id=1217950","https://crates.io/crates/thrussh/versions","https://filezilla-project.org/versions.php","https://forum.netgate.com/topic/184941/terrapin-ssh-attack","https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6","https://github.com/NixOS/nixpkgs/pull/275249","https://github.com/PowerShell/Win32-OpenSSH/issues/2189","https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta","https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0","https://github.com/TeraTermProject/teraterm/releases/tag/v5.1","https://github.com/advisories/GHSA-45x7-px36-x8w8","https://github.com/apache/mina-sshd/issues/445","https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab","https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22","https://github.com/cyd01/KiTTY/issues/520","https://github.com/drakkan/sftpgo/releases/tag/v2.5.6","https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42","https://github.com/erlang/otp/releases/tag/OTP-26.2.1","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://github.com/hierynomus/sshj/issues/916","https://github.com/janmojzis/tinyssh/issues/81","https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5","https://github.com/libssh2/libssh2/pull/1291","https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25","https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3","https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15","https://github.com/mwiede/jsch/issues/457","https://github.com/mwiede/jsch/pull/461","https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16","https://github.com/openssh/openssh-portable/commits/master","https://github.com/paramiko/paramiko/issues/2337","https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES","https://github.com/proftpd/proftpd/issues/456","https://github.com/rapier1/hpn-ssh/releases","https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst","https://github.com/ronf/asyncssh/tags","https://github.com/ssh-mitm/ssh-mitm/issues/165","https://github.com/warp-tech/russh/releases/tag/v0.40.2","https://gitlab.com/libssh/libssh-mirror/-/tags","https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://help.panic.com/releasenotes/transmit5/","https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html","https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/","https://matt.ucc.asn.au/dropbear/CHANGES","https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","https://news.ycombinator.com/item?id=38684904","https://news.ycombinator.com/item?id=38685286","https://news.ycombinator.com/item?id=38732005","https://nova.app/releases/#v11.8","https://oryx-embedded.com/download/#changelog","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002","https://roumenpetrov.info/secsh/#news20231220","https://security-tracker.debian.org/tracker/CVE-2023-48795","https://security-tracker.debian.org/tracker/source-package/libssh2","https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg","https://security-tracker.debian.org/tracker/source-package/trilead-ssh2","https://security.gentoo.org/glsa/202312-16","https://security.gentoo.org/glsa/202312-17","https://security.netapp.com/advisory/ntap-20240105-0004/","https://support.apple.com/kb/HT214084","https://thorntech.com/cve-2023-48795-and-sftp-gateway/","https://twitter.com/TrueSkrillor/status/1736774389725565005","https://ubuntu.com/security/CVE-2023-48795","https://winscp.net/eng/docs/history#6.2.2","https://www.bitvise.com/ssh-client-version-history#933","https://www.bitvise.com/ssh-server-version-history","https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update","https://www.debian.org/security/2023/dsa-5586","https://www.debian.org/security/2023/dsa-5588","https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc","https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508","https://www.netsarang.com/en/xshell-update-history/","https://www.openssh.com/openbsd.html","https://www.openssh.com/txt/release-9.6","https://www.openwall.com/lists/oss-security/2023/12/18/2","https://www.openwall.com/lists/oss-security/2023/12/20/3","https://www.paramiko.org/changelog.html","https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/","https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/","https://www.terrapin-attack.com/","https://www.theregister.com/2023/12/20/terrapin_attack_ssh","https://www.vandyke.com/products/securecrt/history.txt","https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/","https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit","https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-915275.html"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2023-48795","license":"NIST NVD usage terms; underlying source attribution retained","enrichment":{"sourceStatus":"Modified","weaknesses":["CWE-354"],"productCriteria":["cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*","cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*","cpe:2.3:a:filezilla-project:filezilla_client:*:*:*:*:*:*:*:*","cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","cpe:2.3:a:panic:transmit_5:*:*:*:*:*:*:*:*","cpe:2.3:a:panic:nova:*:*:*:*:*:*:*:*","cpe:2.3:a:roumenpetrov:pkixssh:*:*:*:*:*:*:*:*","cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*","cpe:2.3:a:bitvise:ssh_client:*:*:*:*:*:*:*:*","cpe:2.3:a:bitvise:ssh_server:*:*:*:*:*:*:*:*","cpe:2.3:o:lancom-systems:lcos:*:*:*:*:*:*:*:*","cpe:2.3:o:lancom-systems:lcos_fx:-:*:*:*:*:*:*:*","cpe:2.3:o:lancom-systems:lcos_lx:-:*:*:*:*:*:*:*","cpe:2.3:o:lancom-systems:lcos_sx:4.20:*:*:*:*:*:*:*","cpe:2.3:o:lancom-systems:lcos_sx:5.20:*:*:*:*:*:*:*","cpe:2.3:o:lancom-systems:lanconfig:-:*:*:*:*:*:*:*","cpe:2.3:a:vandyke:securecrt:*:*:*:*:*:*:*:*","cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*","cpe:2.3:a:net-ssh:net-ssh:7.2.0:*:*:*:*:ruby:*:*","cpe:2.3:a:ssh2_project:ssh2:*:*:*:*:*:node.js:*:*","cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*","cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*","cpe:2.3:a:crates:thrussh:*:*:*:*:*:*:*:*","cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:*","cpe:2.3:a:oryx-embedded:cyclone_ssh:*:*:*:*:*:*:*:*","cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*","cpe:2.3:a:netsarang:xshell_7:*:*:*:*:*:*:*:*","cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*","cpe:2.3:a:redhat:ceph_storage:6.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*","cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*","cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:discovery:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:*","cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:*","cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:*","cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:*","cpe:2.3:a:sftpgo_project:sftpgo:*:*:*:*:*:*:*:*","cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*","cpe:2.3:a:matez:jsch:*:*:*:*:*:*:*:*","cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*","cpe:2.3:a:asyncssh_project:asyncssh:*:*:*:*:*:*:*:*","cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*","cpe:2.3:a:jadaptive:maverick_synergy_java_ssh_api:*:*:*:*:*:*:*:*","cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*","cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:*","cpe:2.3:a:netgate:pfsense_plus:*:*:*:*:*:*:*:*","cpe:2.3:a:netgate:pfsense_ce:*:*:*:*:*:*:*:*","cpe:2.3:a:connectbot:sshlib:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:*","cpe:2.3:a:apache:sshj:*:*:*:*:*:*:*:*","cpe:2.3:a:tinyssh:tinyssh:*:*:*:*:*:*:*:*","cpe:2.3:a:trilead:ssh2:6401:*:*:*:*:*:*:*","cpe:2.3:a:9bis:kitty:*:*:*:*:*:*:*:*","cpe:2.3:a:gentoo:security:-:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*"],"sourceDates":{"published":"2023-12-18T16:15:10.897","lastModified":"2026-10-15T01:17:10.937"},"relatedAdvisories":[],"note":"NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON."},"key":"nvd:CVE-2023-48795","identifiers":["CVE-2023-48795"]},"retained":false,"historicalAffected":[]},{"revision":"88da02751e704b1bbcfc7e9f3991d3bd","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GHSA-45x7-px36-x8w8","aliases":["CVE-2023-48795","GO-2023-2402","PYSEC-2026-1758"],"title":"Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin","description":"### Summary\n\nTerrapin is a prefix truncation attack targeting the SSH protocol. More precisely, Terrapin breaks the integrity of SSH's secure channel. By carefully adjusting the sequence numbers during the handshake, an attacker can remove an arbitrary amount of messages sent by the client or server at the beginning of the secure channel without the client or server noticing it.\n\n### Mitigations\n\nTo mitigate this protocol vulnerability, OpenSSH suggested a so-called \"strict kex\" which alters the SSH handshake to ensure a Man-in-the-Middle attacker cannot introduce unauthenticated messages as well as convey sequence number manipulation across handshakes.\n\n**Warning: To take effect, both the client and server must support this countermeasure.** \n\nAs a stop-gap measure, peers may also (temporarily) disable the affected algorithms and use unaffected alternatives like AES-GCM instead until patches are available.\n\n### Details\n\nThe SSH specifications of ChaCha20-Poly1305 (chacha20-poly1305@openssh.com) and Encrypt-then-MAC (*-etm@openssh.com MACs) are vulnerable against an arbitrary prefix truncation attack (a.k.a. Terrapin attack). This allows for an extension negotiation downgrade by stripping the SSH_MSG_EXT_INFO sent after the first message after SSH_MSG_NEWKEYS, downgrading security, and disabling attack countermeasures in some versions of OpenSSH. When targeting Encrypt-then-MAC, this attack requires the use of a CBC cipher to be practically exploitable due to the internal workings of the cipher mode. Additionally, this novel attack technique can be used to exploit previously unexploitable implementation flaws in a Man-in-the-Middle scenario.\n\nThe attack works by an attacker injecting an arbitrary number of SSH_MSG_IGNORE messages during the initial key exchange and consequently removing the same number of messages just after the initial key exchange has concluded. This is possible due to missing authentication of the excess SSH_MSG_IGNORE messages and the fact that the implicit sequence numbers used within the SSH protocol are only checked after the initial key exchange.\n\nIn the case of ChaCha20-Poly1305, the attack is guaranteed to work on every connection as this cipher does not maintain an internal state other than the message's sequence number. In the case of Encrypt-Then-MAC, practical exploitation requires the use of a CBC cipher; while theoretical integrity is broken for all ciphers when using this mode, message processing will fail at the application layer for CTR and stream ciphers.\n\nFor more details see [https://terrapin-attack.com](https://terrapin-attack.com). \n\n### Impact\n\nThis attack targets the specification of ChaCha20-Poly1305 (chacha20-poly1305@openssh.com) and Encrypt-then-MAC (*-etm@openssh.com), which are widely adopted by well-known SSH implementations and can be considered de-facto standard. These algorithms can be practically exploited; however, in the case of Encrypt-Then-MAC, we additionally require the use of a CBC cipher. As a consequence, this attack works against all well-behaving SSH implementations supporting either of those algorithms and can be used to downgrade (but not fully strip) connection security in case SSH extension negotiation (RFC8308) is supported. The attack may also enable attackers to exploit certain implementation flaws in a man-in-the-middle (MitM) scenario.","state":0,"publishedAt":"2023-12-18T19:22:09+00:00","modifiedAt":"2026-09-10T03:49:59.2873424+00:00","affected":[{"ecosystem":"crates.io","name":"russh","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.40.2"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"Go","name":"golang.org/x/crypto","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0.1.0"},{"kind":"fixed","version":"0.17.0"}]}],"versions":[],"rawVersionEvidence":null},{"ecosystem":"PyPI","name":"paramiko","ranges":[{"type":"ECOSYSTEM","events":[{"kind":"introduced","version":"2.5.0"},{"kind":"fixed","version":"3.4.0"}]}],"versions":["2.10.0","2.10.1","2.10.2","2.10.3","2.10.4","2.10.5","2.10.6","2.11.0","2.11.1","2.12.0","2.5.0","2.5.1","2.6.0","2.7.0","2.7.1","2.7.2","2.8.0","2.8.1","2.9.0","2.9.1","2.9.2","2.9.3","2.9.4","2.9.5","3.0.0","3.1.0","3.2.0","3.3.0","3.3.1","3.3.2"],"rawVersionEvidence":null},{"ecosystem":"Go","name":"golang.org/x/crypto","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20231218163308-9d2ee975ef9f"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[{"system":"CVSS_V3","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","score":null,"severity":null},{"system":"Publisher rating","vector":null,"score":null,"severity":"MODERATE"}],"references":["https://github.com/warp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8","https://nvd.nist.gov/vuln/detail/CVE-2023-48795","https://github.com/ssh-mitm/ssh-mitm/issues/165","https://github.com/hierynomus/sshj/issues/916","https://github.com/janmojzis/tinyssh/issues/81","https://github.com/cyd01/KiTTY/issues/520","https://github.com/proftpd/proftpd/issues/456","https://github.com/apache/mina-sshd/issues/445","https://github.com/paramiko/paramiko/issues/2337#issuecomment-1887642773","https://github.com/paramiko/paramiko/issues/2337","https://github.com/PowerShell/Win32-OpenSSH/issues/2189","https://github.com/mwiede/jsch/issues/457","https://github.com/libssh2/libssh2/pull/1291","https://github.com/NixOS/nixpkgs/pull/275249","https://github.com/mwiede/jsch/pull/461","https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0","https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3","https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab","https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5","https://github.com/warp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://oryx-embedded.com/download/#changelog","https://nova.app/releases/#v11.8","https://news.ycombinator.com/item?id=38732005","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002","https://roumenpetrov.info/secsh/#news20231220","https://security-tracker.debian.org/tracker/CVE-2023-48795","https://security-tracker.debian.org/tracker/source-package/libssh2","https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB","https://matt.ucc.asn.au/dropbear/CHANGES","https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC","https://news.ycombinator.com/item?id=38684904","https://news.ycombinator.com/item?id=38685286","https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability","https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit","https://www.vandyke.com/products/securecrt/history.txt","https://www.theregister.com/2023/12/20/terrapin_attack_ssh","https://www.terrapin-attack.com/","https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795","https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed","https://www.paramiko.org/changelog.html","https://www.openwall.com/lists/oss-security/2023/12/20/3","https://www.openwall.com/lists/oss-security/2023/12/18/2","https://www.openssh.com/txt/release-9.6","https://www.openssh.com/openbsd.html","https://www.netsarang.com/en/xshell-update-history","https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508","https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc","https://www.debian.org/security/2023/dsa-5588","https://www.debian.org/security/2023/dsa-5586","https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update","https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html","https://www.bitvise.com/ssh-server-version-history","https://www.bitvise.com/ssh-client-version-history#933","https://winscp.net/eng/docs/history#6.2.2","https://ubuntu.com/security/CVE-2023-48795","https://twitter.com/TrueSkrillor/status/1736774389725565005","https://thorntech.com/cve-2023-48795-and-sftp-gateway","https://support.apple.com/kb/HT214084","https://security.netapp.com/advisory/ntap-20240105-0004","https://security.gentoo.org/glsa/202312-17","https://security.gentoo.org/glsa/202312-16","https://security-tracker.debian.org/tracker/source-package/trilead-ssh2","https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg","https://github.com/rapier1/hpn-ssh/releases","https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES","https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES","https://github.com/openssh/openssh-portable/commits/master","https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16","https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15","https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25","https://github.com/erlang/otp/releases/tag/OTP-26.2.1","https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42","https://github.com/drakkan/sftpgo/releases/tag/v2.5.6","https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22","https://github.com/advisories/GHSA-45x7-px36-x8w8","https://github.com/TeraTermProject/teraterm/releases/tag/v5.1","https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta","https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6","https://forum.netgate.com/topic/184941/terrapin-ssh-attack","https://filezilla-project.org/versions.php","https://crates.io/crates/thrussh/versions","https://cert-portal.siemens.com/productcert/html/ssa-915275.html","https://cert-portal.siemens.com/productcert/html/ssa-794697.html","https://cert-portal.siemens.com/productcert/html/ssa-769027.html","https://cert-portal.siemens.com/productcert/html/ssa-364175.html","https://cert-portal.siemens.com/productcert/html/ssa-082556.html","https://bugzilla.suse.com/show_bug.cgi?id=1217950","https://bugzilla.redhat.com/show_bug.cgi?id=2254210","https://bugs.gentoo.org/920280","https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack","https://access.redhat.com/security/cve/cve-2023-48795","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA","https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html","https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html","https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html","https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html","https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html","https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html","https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795","https://help.panic.com/releasenotes/transmit5","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ","https://go.dev/issue/64784","https://go.dev/cl/550715","https://gitlab.com/libssh/libssh-mirror/-/tags","https://github.com/warp-tech/russh/releases/tag/v0.40.2","https://github.com/warp-tech/russh","https://github.com/ronf/asyncssh/tags","http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html","http://seclists.org/fulldisclosure/2024/Mar/21","http://www.openwall.com/lists/oss-security/2023/12/18/3","http://www.openwall.com/lists/oss-security/2023/12/19/5","http://www.openwall.com/lists/oss-security/2023/12/20/3","http://www.openwall.com/lists/oss-security/2024/03/06/3","http://www.openwall.com/lists/oss-security/2024/04/17/8"],"sourceUrl":"https://github.com/advisories/GHSA-45x7-px36-x8w8","license":"GitHub Advisory Database · CC-BY-4.0","key":"osv:GHSA-45x7-px36-x8w8","identifiers":["GHSA-45x7-px36-x8w8","CVE-2023-48795","GO-2023-2402","PYSEC-2026-1758"]},"retained":false,"historicalAffected":[]},{"revision":"cdd5c2397b014e99a2f965d7aaa8815f","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2023-2402","aliases":["CVE-2023-48795","GHSA-45x7-px36-x8w8","PYSEC-2026-1758"],"title":"Man-in-the-middle attacker can compromise integrity of secure channel in golang.org/x/crypto","description":"A protocol weakness allows a MITM attacker to compromise the integrity of the secure channel before it is established, allowing the attacker to prevent transmission of a number of messages immediately after the secure channel is established without either side being aware.\n\nThe impact of this attack is relatively limited, as it does not compromise confidentiality of the channel. Notably this attack would allow an attacker to prevent the transmission of the SSH2_MSG_EXT_INFO message, disabling a handful of newer security features.\n\nThis protocol weakness was also fixed in OpenSSH 9.6.","state":0,"publishedAt":"2023-12-18T21:18:26+00:00","modifiedAt":"2026-07-07T17:57:21.1076106+00:00","affected":[{"ecosystem":"Go","name":"golang.org/x/crypto","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.17.0"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://go.dev/issue/64784","https://go.dev/cl/550715","https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d","https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg","https://www.openssh.com/txt/release-9.6"],"sourceUrl":"https://osv.dev/vulnerability/GO-2023-2402","license":"OSV · upstream source license applies","key":"osv:GO-2023-2402","identifiers":["GO-2023-2402","CVE-2023-48795","GHSA-45x7-px36-x8w8","PYSEC-2026-1758"]},"retained":false,"historicalAffected":[]}],"coverage":[{"source":"cisa-kev:global","scope":"Complete CISA KEV catalog; all vendors. Missing entries do not establish absence of exploitation.","generation":"2026-11-09T19:02:11.0282238+00:00","complete":true,"records":1772,"lastAttemptAt":"2026-11-09T19:02:11.0282238+00:00","lastSuccessAt":"2026-11-09T19:02:11.2511726+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:02:11.2511728+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"cve-program","scope":"Official CVE Program baseline and cumulative hourly delta; all vendors, published and rejected records","generation":"cve-24e6fde7b744113daefb8f6135035fb8a5c69c9617c9c0d40574a0376532ffd3-da82b7f3c08c0a1c809bacbfac0a567c645c18f0205247304bfc7e4ee4c02653","complete":true,"records":421491,"lastAttemptAt":"2026-11-09T19:02:10.4293016+00:00","lastSuccessAt":"2026-11-09T18:02:17.6122603+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:02:10.4293016+00:00","snapshotPublishedAt":"2026-11-09T17:19:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"euvd","scope":"Rolling EUVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global EUVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-f1df18dfb77f437e9e2ee1dd548e1f15","complete":false,"records":13655,"lastAttemptAt":"2026-11-09T19:14:35.1855237+00:00","lastSuccessAt":"2026-11-09T19:14:35.178+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:14:35.178+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13398,"expectedIdentifiers":13707,"failedIdentifiers":0},{"source":"first-epss:nuget","scope":"FIRST EPSS for explicit CVE aliases in the collected public NuGet archive. Not a global EPSS backfill.","generation":"2026-11-09T19:02:11.0282238+00:00","complete":true,"records":1096,"lastAttemptAt":"2026-11-09T19:02:11.0282238+00:00","lastSuccessAt":"2026-11-09T19:02:11.2551731+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:02:11.2551735+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"nvd","scope":"Rolling NVD lookups of CVE aliases in current public OSV archives; 500 identifiers per refresh, rechecked after 48 hours. Not a global NVD catalog. Successful not-found lookups count as checked; they do not imply withdrawal or safety. No reader inventory is sent.","generation":"enrichment-9c7aae9a77ad4fe48f16e3014ae326fa","complete":true,"records":13667,"lastAttemptAt":"2026-11-09T19:02:43.2420437+00:00","lastSuccessAt":"2026-11-09T19:02:43.234+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:02:43.234+00:00","snapshotPublishedAt":null,"importing":false,"stagedRecords":0,"checkedIdentifiers":13707,"expectedIdentifiers":13707,"failedIdentifiers":0},{"source":"osv:Go","scope":"Complete OSV Go ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"go-980593e6977a6d1b4fb1eed5a1ffe88a468736f89f0a06f710924ad59132c023","complete":true,"records":9914,"lastAttemptAt":"2026-11-09T19:02:10.7853332+00:00","lastSuccessAt":"2026-11-08T11:07:07.068788+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:02:10.7853332+00:00","snapshotPublishedAt":"2026-11-08T11:02:46+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:NuGet","scope":"Complete OSV NuGet ecosystem archive, including GitHub Advisory Database records; NuGet version matching only","generation":"nuget-712163772d637a9cfaa34d4241efb9e9d0ccd6149596c672c613d362f44af841","complete":true,"records":1971,"lastAttemptAt":"2026-11-09T19:02:10.5860178+00:00","lastSuccessAt":"2026-11-09T18:02:23.0088273+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:02:10.5860178+00:00","snapshotPublishedAt":"2026-11-09T17:03:01+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:crates.io","scope":"Complete OSV crates.io ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"crates.io-761ecc9061239b0da572dc9254c6f384c1d19339eb08408c436647a2f26129e9","complete":true,"records":3064,"lastAttemptAt":"2026-11-09T19:02:10.8954054+00:00","lastSuccessAt":"2026-11-09T17:05:03.4044794+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:02:10.8954054+00:00","snapshotPublishedAt":"2026-11-09T16:33:20+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null},{"source":"osv:npm","scope":"Complete OSV npm ecosystem archive, including withdrawn and malicious-package source records; statement counts are not unique CVE counts","generation":"npm-e3fec63b2a5926ae79916bc9569f5c1069b095db78f2be319f909e69e8e6d7d3","complete":true,"records":231313,"lastAttemptAt":"2026-11-09T19:02:10.6843987+00:00","lastSuccessAt":"2026-11-09T18:04:48.1910635+00:00","error":null,"lastVerifiedAt":"2026-11-09T19:02:10.6843987+00:00","snapshotPublishedAt":"2026-11-09T17:33:10+00:00","importing":false,"stagedRecords":0,"checkedIdentifiers":null,"expectedIdentifiers":null,"failedIdentifiers":null}]}