Oracle Linux: CVE-2023-25136: ELSA-2023-2645: openssh security update (MODERATE) (Multiple Advisories)

Oracle Linux: CVE-2023-25136: ELSA-2023-2645:openssh security update (MODERATE) (Multiple Advisories)

Severity

6

CVSS

(AV:N/AC:H/Au:N/C:N/I:P/A:C)

Published

02/03/2023

Created

05/19/2023

Added

05/18/2023

Modified

11/11/2024

Description

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible." A flaw was found in the OpenSSH server (sshd), which introduced a double-free vulnerability during options.kex_algorithms handling. An unauthenticated attacker can trigger the double-free in the default configuration.

Solution(s)

• oracle-linux-upgrade-openssh
• oracle-linux-upgrade-openssh-askpass
• oracle-linux-upgrade-openssh-clients
• oracle-linux-upgrade-openssh-keycat
• oracle-linux-upgrade-openssh-server
• oracle-linux-upgrade-pam-ssh-agent-auth

References

• https://attackerkb.com/topics/cve-2023-25136
• CVE - 2023-25136
• ELSA-2023-2645