Skip to content
NewA calmer, faster ZeroHour

Millions still haven’t patched Terrapin SSH protocol vulnerability

Ars Technica · Security ()1 min read1 · 1 read
Analyze CVE-2023-48795 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2023-48795
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks…
5.993%

From the original article

1 min read at arstechnica.com

Roughly 11 million Internet-exposed servers remain susceptible to a recently discovered vulnerability that allows attackers with a foothold inside affected networks. Once they’re in, attackers compromise the integrity of SSH sessions that form the lynchpin for admins to securely connect to computers inside the cloud and other sensitive environments.

Ars Technica · Security

arstechnica.com

Read the full article at Ars Technica · Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.