01 Record

CVE-2023-48795

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from

MediumPUBLISHEDCNA: mitre

CNA base score5.9 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

View raw JSON

02 Description

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from

03 Exploitation and scoring

Exploitation

Public exploit code exists. CISA's assessment records a public proof of concept. That is not a report of exploitation in the wild.

SSVC decision

ExploitationpocPublic proof-of-concept exploit code exists. Not a report of exploitation in the wild.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

93.31% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 99.8% of scored records. A rank, not a probability.

NVD base score

5.9 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2023-12-18 00:00Z2 YR AGO

Last updated

2026-07-14 12:16Z1 MO AGO

Reserved

2023-11-20

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Medium (CVSS 5.9)

CNA CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses

CWE-354Improper Validation of Integrity Check ValueBase
CWE-222Truncation of Security-relevant InformationBase

Data version

5.2

Document digest

6245f198b3b89bb0ce1ca70cf48604dbd5946ee31b3d2ef99a16ee60a2a83124

05 Affected products

VendorProductVersionsPlatforms

9biskittyNot specified—

apachesshdNot specified—

apachesshjNot specified—

applemacosNot specified—

asyncssh_projectasyncsshNot specified—

bitvisessh_clientNot specified—

bitvisessh_serverNot specified—

connectbotsshlibNot specified—

cratesthrusshNot specified—

crushftpcrushftpNot specified—

debiandebian_linuxNot specified—

dropbear_ssh_projectdropbear_sshNot specified—

erlangerlang/otpNot specified—

fedoraprojectfedoraNot specified—

filezilla-projectfilezilla_clientNot specified—

freebsdfreebsdNot specified—

gentoosecurityNot specified—

golangcryptoNot specified—

jadaptivemaverick_synergy_java_ssh_apiNot specified—

lancom-systemslanconfigNot specified—

lancom-systemslcosNot specified—

lancom-systemslcos_fxNot specified—

lancom-systemslcos_lxNot specified—

lancom-systemslcos_sxNot specified—

libsshlibsshNot specified—

libssh2libssh2Not specified—

matezjschNot specified—

net-sshnet-sshNot specified—

netgatepfsense_ceNot specified—

netgatepfsense_plusNot specified—

netsarangxshell_7Not specified—

openbsdopensshNot specified—

oryx-embeddedcyclone_sshNot specified—

panicnovaNot specified—

panictransmit_5Not specified—

paramikoparamikoNot specified—

proftpdproftpdNot specified—

puttyputtyNot specified—

redhatadvanced_cluster_securityNot specified—

redhatansible_automation_platformNot specified—

redhatbuild_keycloakNot specified—

redhatcamel_quarkusNot specified—

redhatceph_storageNot specified—

redhatcert-manager_operator_for_red_hat_openshiftNot specified—

redhatcert_managerNot specified—

redhatcontainer_native_virtualizationNot specified—

redhatdiscoveryNot specified—

redhatenterprise_linuxNot specified—

redhatjboss_enterprise_application_platformNot specified—

redhatjboss_enterprise_bpms_platformNot specified—

redhatkeycloakNot specified—

redhatocp_toolsNot specified—

redhatopenshiftNot specified—

redhatopenshift_api_data_protectionNot specified—

redhatopenshift_api_for_data_protectionNot specified—

redhatopenshift_buildsNot specified—

redhatopenshift_container_platformNot specified—

redhatopenshift_container_storageNot specified—

redhatopenshift_data_foundationNot specified—

redhatopenshift_dev_spacesNot specified—

30 further entries not shown. The complete list is in the raw JSON document.

06 References

www.chiark.greenend.org.ukhttps://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
matt.ucc.asn.auhttps://matt.ucc.asn.au/dropbear/CHANGES
github.comhttps://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
www.netsarang.comhttps://www.netsarang.com/en/xshell-update-history/
www.paramiko.orghttps://www.paramiko.org/changelog.html
www.openssh.comhttps://www.openssh.com/openbsd.html
github.comhttps://github.com/openssh/openssh-portable/commits/master
groups.google.comhttps://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
www.bitvise.comhttps://www.bitvise.com/ssh-server-version-history
github.comhttps://github.com/ronf/asyncssh/tags
gitlab.comhttps://gitlab.com/libssh/libssh-mirror/-/tags
www.reddit.comhttps://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/
github.comhttps://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42
www.openssh.comhttps://www.openssh.com/txt/release-9.6
jadaptive.comhttps://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/
www.terrapin-attack.comhttps://www.terrapin-attack.com
github.comhttps://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25
github.comhttps://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
thorntech.comhttps://thorntech.com/cve-2023-48795-and-sftp-gateway/
github.comhttps://github.com/warp-tech/russh/releases/tag/v0.40.2
github.comhttps://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0
www.openwall.comhttps://www.openwall.com/lists/oss-security/2023/12/18/2
twitter.comhttps://twitter.com/TrueSkrillor/status/1736774389725565005
github.comhttps://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
github.comhttps://github.com/paramiko/paramiko/issues/2337
groups.google.comhttps://groups.google.com/g/golang-announce/c/qA3XtxvMUyg
news.ycombinator.comhttps://news.ycombinator.com/item?id=38684904
news.ycombinator.comhttps://news.ycombinator.com/item?id=38685286
www.openwall.com[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)http://www.openwall.com/lists/oss-security/2023/12/18/3mailing-list
github.comhttps://github.com/mwiede/jsch/issues/457
git.libssh.orghttps://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6
github.comhttps://github.com/erlang/otp/releases/tag/OTP-26.2.1
github.comhttps://github.com/advisories/GHSA-45x7-px36-x8w8
security-tracker.debian.orghttps://security-tracker.debian.org/tracker/source-package/libssh2
security-tracker.debian.orghttps://security-tracker.debian.org/tracker/source-package/proftpd-dfsg
security-tracker.debian.orghttps://security-tracker.debian.org/tracker/CVE-2023-48795
bugzilla.suse.comhttps://bugzilla.suse.com/show_bug.cgi?id=1217950
bugzilla.redhat.comhttps://bugzilla.redhat.com/show_bug.cgi?id=2254210
bugs.gentoo.orghttps://bugs.gentoo.org/920280
ubuntu.comhttps://ubuntu.com/security/CVE-2023-48795
www.suse.comhttps://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/
access.redhat.comhttps://access.redhat.com/security/cve/cve-2023-48795
github.comhttps://github.com/mwiede/jsch/pull/461
github.comhttps://github.com/drakkan/sftpgo/releases/tag/v2.5.6
github.comhttps://github.com/libssh2/libssh2/pull/1291
forum.netgate.comhttps://forum.netgate.com/topic/184941/terrapin-ssh-attack
github.comhttps://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5
github.comhttps://github.com/rapier1/hpn-ssh/releases
github.comhttps://github.com/proftpd/proftpd/issues/456
github.comhttps://github.com/TeraTermProject/teraterm/releases/tag/v5.1
github.comhttps://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15
oryx-embedded.comhttps://oryx-embedded.com/download/#changelog
www.crushftp.comhttps://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
github.comhttps://github.com/connectbot/sshlib/compare/2.2.21...2.2.22
github.comhttps://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab
github.comhttps://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
nest.pijul.comhttps://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC
crates.iohttps://crates.io/crates/thrussh/versions
github.comhttps://github.com/NixOS/nixpkgs/pull/275249
www.openwall.com[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)http://www.openwall.com/lists/oss-security/2023/12/19/5mailing-list
www.freebsd.orghttps://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc
arstechnica.comhttps://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/
www.openwall.com[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)http://www.openwall.com/lists/oss-security/2023/12/20/3mailing-list
packetstormsecurity.comhttp://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
github.comhttps://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES
github.comhttps://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES
github.comhttps://github.com/apache/mina-sshd/issues/445
github.comhttps://github.com/hierynomus/sshj/issues/916
github.comhttps://github.com/janmojzis/tinyssh/issues/81
www.openwall.comhttps://www.openwall.com/lists/oss-security/2023/12/20/3
security-tracker.debian.orghttps://security-tracker.debian.org/tracker/source-package/trilead-ssh2
github.comhttps://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16
lists.fedoraproject.orgFEDORA-2023-0733306be9https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/vendor-advisory
www.debian.orgDSA-5586https://www.debian.org/security/2023/dsa-5586vendor-advisory
www.lancom-systems.dehttps://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508
www.theregister.comhttps://www.theregister.com/2023/12/20/terrapin_attack_ssh
filezilla-project.orghttps://filezilla-project.org/versions.php
nova.apphttps://nova.app/releases/#v11.8
roumenpetrov.infohttps://roumenpetrov.info/secsh/#news20231220
www.vandyke.comhttps://www.vandyke.com/products/securecrt/history.txt
help.panic.comhttps://help.panic.com/releasenotes/transmit5/
github.comhttps://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta
github.comhttps://github.com/PowerShell/Win32-OpenSSH/issues/2189
winscp.nethttps://winscp.net/eng/docs/history#6.2.2
www.bitvise.comhttps://www.bitvise.com/ssh-client-version-history#933
github.comhttps://github.com/cyd01/KiTTY/issues/520
www.debian.orgDSA-5588https://www.debian.org/security/2023/dsa-5588vendor-advisory
github.comhttps://github.com/ssh-mitm/ssh-mitm/issues/165
news.ycombinator.comhttps://news.ycombinator.com/item?id=38732005
lists.debian.org[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security updatehttps://lists.debian.org/debian-lts-announce/2023/12/msg00017.htmlmailing-list
security.gentoo.orgGLSA-202312-16https://security.gentoo.org/glsa/202312-16vendor-advisory
security.gentoo.orgGLSA-202312-17https://security.gentoo.org/glsa/202312-17vendor-advisory
lists.fedoraproject.orgFEDORA-2023-20feb865d8https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/vendor-advisory
lists.fedoraproject.orgFEDORA-2023-cb8c606fbbhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/vendor-advisory
lists.fedoraproject.orgFEDORA-2023-e77300e4b5https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/vendor-advisory
lists.fedoraproject.orgFEDORA-2023-b87ec6cf47https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/vendor-advisory
lists.fedoraproject.orgFEDORA-2023-153404713bhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/vendor-advisory
security.netapp.comhttps://security.netapp.com/advisory/ntap-20240105-0004/
lists.fedoraproject.orgFEDORA-2024-3bb23c77f3https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/vendor-advisory
lists.fedoraproject.orgFEDORA-2023-55800423a8https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/vendor-advisory
lists.fedoraproject.orgFEDORA-2024-d946b9ad25https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/vendor-advisory
lists.fedoraproject.orgFEDORA-2024-71c2c6526chttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/vendor-advisory
lists.fedoraproject.orgFEDORA-2024-39a8c72ea9https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/vendor-advisory
psirt.global.sonicwall.comhttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002
lists.fedoraproject.orgFEDORA-2024-ae653fb07bhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/vendor-advisory
lists.fedoraproject.orgFEDORA-2024-2705241461https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/vendor-advisory
lists.fedoraproject.orgFEDORA-2024-fb32950d11https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/vendor-advisory
lists.fedoraproject.orgFEDORA-2024-7b08207cdbhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/vendor-advisory
lists.fedoraproject.orgFEDORA-2024-06ebb70bddhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/vendor-advisory
lists.debian.org[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security updatehttps://lists.debian.org/debian-lts-announce/2024/01/msg00013.htmlmailing-list
lists.debian.org[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security updatehttps://lists.debian.org/debian-lts-announce/2024/01/msg00014.htmlmailing-list
lists.fedoraproject.orgFEDORA-2024-a53b24023dhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/vendor-advisory
lists.fedoraproject.orgFEDORA-2024-3fd1bc9276https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/vendor-advisory
support.apple.comhttps://support.apple.com/kb/HT214084
seclists.org20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4http://seclists.org/fulldisclosure/2024/Mar/21mailing-list
lists.debian.org[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security updatehttps://lists.debian.org/debian-lts-announce/2024/04/msg00016.htmlmailing-list
www.openwall.com[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI clienthttp://www.openwall.com/lists/oss-security/2024/04/17/8mailing-list
www.openwall.com[oss-security] 20240306 Multiple vulnerabilities in Jenkins pluginshttp://www.openwall.com/lists/oss-security/2024/03/06/3mailing-list
www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit
www.vicarius.iohttps://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/04/msg00028.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/11/msg00032.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2024/09/msg00042.html
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/
lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-794697.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-364175.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-915275.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-769027.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html

01 Record index

CVE-2023-48795

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2023-48795

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References