Openssh Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/openssh/ Wed, 22 Feb 2023 14:02:30 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png Openssh Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/openssh/ 32 32 CVE-2023-25136 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-25136/ Wed, 22 Feb 2023 14:02:30 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-25136 OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states “remote code execution is theoretically possible.”

The post CVE-2023-25136 appeared first on CVE Vulnerability.

]]> OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states “remote code execution is theoretically possible.”

The post CVE-2023-25136 appeared first on CVE Vulnerability.

]]>