Описание
An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 2.20.0-1 |
| esm-apps/bionic | released | 1.11.1-1ubuntu0.1~esm2 |
| esm-apps/focal | released | 1.12.2-1ubuntu0.2 |
| esm-apps/jammy | released | 2.5.0-1ubuntu0.1 |
| esm-apps/noble | released | 2.10.1-2ubuntu0.1+esm1 |
| esm-apps/xenial | ignored | backporting risks regressions |
| focal | released | 1.12.2-1ubuntu0.2 |
| jammy | released | 2.5.0-1ubuntu0.1 |
| lunar | ignored | end of life, was needs-triage |
Показывать по
5.9 Medium
CVSS3
Связанные уязвимости
An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."
An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."
An issue in AsyncSSH before 2.14.1 allows attackers to control the ext ...
Уязвимость пакета клиентской и серверной реализации протокола SSHv2 asyncssh интерпретатора языка программирования Python, позволяющая нарушителю проводить атаки типа "человек по середине"
5.9 Medium
CVSS3