Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
Severity
5.9MEDIUM
EPSS
56.7%
top 1.87%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedDec 18
Latest updateApr 15
Description
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the ha…
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:NExploitability: 2.2 | Impact: 3.6
Affected Packages73 packages
Also affects: Debian Linux 10.0, Fedora 38, 39, Enterprise Linux 8.0, 9.0, Openshift Container Platform 4.0
Patches
🔴Vulnerability Details
10CVEList▶
CVE-2023-48795: The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9↗2023-12-18
💥Exploits & PoCs
1Nuclei▶
OpenSSH Terrapin Attack - Detection
📋Vendor Advisories
22Oracle▶
Oracle Oracle Retail Applications Risk Matrix: Xenvironment (Apache Mina SSHD) — CVE-2023-48795↗2025-04-15
Oracle▶
Oracle Oracle Database Server Risk Matrix: Database Migration Assistant for Unicode (Apache Mina SSHD) — CVE-2023-48795↗2025-01-15
Oracle▶
Oracle Oracle Blockchain Platform Risk Matrix: Blockchain Cloud Service Console (OpenSSH) — CVE-2023-48795↗2024-10-15
🕵️Threat Intelligence
3💬Community
1HackerOne
▶