MediumCVE-2023-48795

SSH Communications Security SSH daemon: security vulnerability (CVE-2023-48795)

Published 18.12.2023Last modified 15.10.2026Sources: Debian, Debian LTS, BSI, Red Hat, Siemens ProductCERT, SUSE, Ubuntu, OSV, CVE.org, Msrc Update Guide

Public exploit

What is affected, what to do

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure.

An exploit is publicly available. The available sources name no fixed version. Check the vendor guidance in the references below.

Conflicting version data — version display is hidden until the data is resolved.

Not sure whether and how you are affected? Ask a question about this vulnerability

Metrics

5.9

Priority

XIEM Effective CVSS: highest available CVSS rating from NVD and vendor data.

Source: NVD, CVSS v3

5.9

CVSS v3

Severity Medium on the scale from 0 to 10.

Source: Debian, Debian LTS, BSI, Red Hat, Siemens ProductCERT, SUSE, Ubuntu, OSV, CVE.org, Msrc Update Guide

93.6 %

EPSS score

High — model estimates ≥ 50% chance of real-world exploitation within 30 days.

Source: FIRST EPSS, percentile 99.84

Show all metrics

Severity: Medium
Priority (0–325) The priority score is a consolidated metric that condenses several individual signals into a single, action-guiding ranking: technical severity (CVSS), exploitation likelihood (EPSS), known-exploited status (KEV) and the context of the affected asset. The aim is to answer the only truly important question in vulnerability management: what first? Read in glossary: 113.32 Methodology
Exploit maturity An exploit is code or a technique that specifically uses a concrete vulnerability to force unintended behaviour — such as executing code or escalating privileges. It is the tool that turns a theoretical flaw into a practical attack. Read in glossary: PoC (publicly reported)
XIEM Effective CVSS XIEM® is the tiered managed-security operating model from NEOSEC and a registered trademark of NEOSEC GmbH. It extends classic SIEM — the central collection, normalisation and correlation of security-relevant events — with endpoint forensics, network visibility and deception technology, and consolidates them into three building tiers: Sentry, Orchestrate and Command. Read in glossary: 5.9 Methodology
CVSS v3 CVSS is the globally established, open standard for assessing the technical severity of a vulnerability on a scale from 0 to 10. It describes how easily a flaw can be exploited and what damage it can cause — but not how likely its actual exploitation is. CVSS and the complementary EPSS deliberately answer different questions. Read in glossary: 5.9
EPSS score The EPSS score is the absolute model output for an individual vulnerability: the estimated probability of real-world exploitation within the next 30 days, expressed as a value between 0 and 1 (i.e. 0 % to 100 %). A score of 0.42 means „the model estimates a 42 % chance of real-world exploitation within 30 days“. Read in glossary: 93.6 %; High — model estimates ≥ 50% chance of real-world exploitation within 30 days.
EPSS percentile The EPSS percentile is the relative position of a vulnerability within all EPSS-scored CVEs, expressed as a value between 0 and 1. A percentile of 0.90 means „this CVE has a higher EPSS score than 90 % of all other scored CVEs“. Unlike the EPSS score, it is not a probability — but a positioning within a ranking. Read in glossary: 99.84; Critical — this CVE ranks in the top fifth of all CVEs scored today (rank ≥ 80%).
KEV status The KEV catalogue is a list maintained by the US authority CISA of vulnerabilities for which active exploitation in the wild has been confirmed. It answers not the question „how severe?“ but „is it already being attacked?“ — thereby sharply prioritising patching. Read in glossary: —
Published: 18.12.2023

Detection rules

No NEOSEC detection rule is available for this vulnerability yet.

Classification under NIS2 and CRA

Rule-based classification from exploitation status and severity. It does not replace a case-by-case assessment.

NIS2 NIS2 is EU Directive (EU) 2022/2555 to raise the level of cybersecurity across the Union. It substantially broadens obligations compared with the first NIS directive: more sectors, mandatory risk management, staged reporting duties and personal accountability of senior management. Read in glossary: Handle the vulnerability in regular vulnerability handling under Art. 21(2)(e) NIS2.
CRA The CRA is EU Regulation (EU) 2024/2847 setting horizontal cybersecurity requirements for „products with digital elements“ — from industrial controllers and software to connected consumer devices. For the first time manufacturers must ensure security across the entire product lifecycle, handle vulnerabilities and provide security updates. Read in glossary: From 11.12.2027, Annex I Part II CRA requires manufacturers of affected products with digital elements to handle vulnerabilities without delay and provide security updates.
ISO/IEC 27001 ISO/IEC 27001 is the internationally leading standard for an information security management system (ISMS). It describes a risk-based, process-oriented framework to systematically plan, implement, review and improve information security. Read in glossary: Control A.8.8, management of technical vulnerabilities: assess relevance to your systems, plan remediation and keep evidence.

Description

A flaw was found in the SSH channel integrity. By manipulating sequence numbers during the handshake, an attacker can remove the initial messages on the secure channel without causing a MAC failure. For example, an attacker could disable the ping extension and thus disable the new countermeasure in OpenSSH 9.5 against keystroke timing attacks.

Source: Debian Security Advisories, Debian LTS Advisories, BSI CSAF, BSI WID Portal, redhat_csaf, siemens_advisory, suse_csaf, Ubuntu Security Notices, OSV (Open Source Vulnerabilities), cvelistv5, NVD (NIST), Microsoft Security Update Guide

Affected products

The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.

Affected products
		Affected versions	Fixed in
9bis	kitty	`≤ 0.76.1.13`	—
apache	sshd	`≤ 2.11.0`	—
apache	sshj	`≤ 0.37.0`	—
asyncssh_project	asyncssh	`< 2.14.2`	`2.14.2`
bitvise	ssh_client	`< 9.33`	`9.33`
bitvise	ssh_server	`< 9.32`	`9.32`
connectbot	sshlib	`< 2.2.22`	`2.2.22`
crates	thrussh	`< 0.35.1`	`0.35.1`
crushftp	crushftp	`≤ 10.6.0`	—
dropbear_ssh_project	dropbear_ssh	`< 2022.83`	`2022.83`
erlang	erlang\/otp	`24.0 – < 24.3.4.15` `23.0 – < 23.3.4.20` `< 22.3.4.27` `25.0 – < 25.3.2.8` `26.0 – < 26.2.1`	`24.3.4.15` `23.3.4.20` `22.3.4.27` `25.3.2.8` `26.2.1`
filezilla-project	filezilla_client	`< 3.66.4`	`3.66.4`
gentoo	security	`—`	—
golang	crypto	`< 0.17.0`	`0.17.0`
jadaptive	maverick_synergy_java_ssh_api	`< 3.1.0-snapshot`	`3.1.0-snapshot`
libssh	libssh	`< 0.10.6`	`0.10.6`
libssh2	libssh2	`< 1.11.1`	`1.11.1`
matez	jsch	`< 0.2.15`	`0.2.15`
net-ssh	net-ssh	`7.2.0`	—
netgate	pfsense_ce	`≤ 2.7.2`	—
netgate	pfsense_plus	`≤ 23.09.1`	—
netsarang	xshell_7	`< build__0144`	`build__0144`
openbsd	openssh	`< 9.6`	`9.6`
oryx-embedded	cyclone_ssh	`< 2.3.4`	`2.3.4`
panic	nova	`< 11.8`	`11.8`
panic	transmit_5	`< 5.10.4`	`5.10.4`
paramiko	paramiko	`< 3.4.0`	`3.4.0`
proftpd	proftpd	`≤ 1.3.8b`	—
putty	putty	`< 0.80`	`0.80`
redhat	advanced_cluster_security	`3.0` `4.0`	— —
redhat	ceph_storage	`6.0`	—
redhat	cert-manager_operator_for_red_hat_openshift	`—`	—
redhat	discovery	`—`	—
redhat	jboss_enterprise_application_platform	`7.0`	—
redhat	keycloak	`—`	—
redhat	openshift_api_for_data_protection	`—`	—
redhat	openshift_container_platform	`4.0`	—
redhat	openshift_data_foundation	`4.0`	—
redhat	openshift_dev_spaces	`—`	—
redhat	openshift_developer_tools_and_services	`—`	—
redhat	openshift_gitops	`—`	—
redhat	openshift_pipelines	`—`	—
redhat	openshift_serverless	`—`	—

Vendors and products

Affected operating systems

Affected operating systems

BSD	freebsd	freebsd	—
Linux	debian	debian_linux	`10.0`
Linux	redhat	enterprise_linux	`8.0`
Linux	redhat	enterprise_linux	`9.0`
Linux	debian	erlang	`bookworm`
Linux	debian	erlang	`bullseye`
Linux	debian	libssh	`bookworm`
Linux	debian	libssh	`bullseye`
Linux	debian	openssh	`bookworm`
Linux	debian	openssh	`bullseye`
Linux	ubuntu	openssh	`focal`
Linux	ubuntu	openssh	`jammy`
Linux	ubuntu	openssh	`lunar`
Linux	ubuntu	openssh	`mantic`
Linux	debian	php-phpseclib	`bookworm`
Linux	debian	php-phpseclib	`bullseye`
Linux	debian	php-phpseclib3	`bookworm`
Linux	debian	phpseclib	`bookworm`
Linux	debian	phpseclib	`bullseye`
Linux	debian	putty	`bookworm`
Linux	debian	putty	`bullseye`
Linux	debian	python-asyncssh	`bookworm`
macOS	apple	macos	—
Other	fedoraproject	fedora	`38`

Public exploit references

Publicly reported proof-of-concepts, exploit modules and detection templates for this vulnerability. NEOSEC links to the original sources only and does not provide any exploit code.

Public exploit references

Packet Storm	Terrapin SSH Connection Weakening (opens in a new tab)packetstormsecurity.com	PoC (publicly reported)reported, not verified	—
PoC-in-GitHub (nomi-sec)	sshfinder (opens in a new tab)github.com	PoC (publicly reported)reported, not verified	05.12.2024
PoC-in-GitHub (nomi-sec)	Scanner_CVE_OpenSSH (opens in a new tab)github.com	PoC (publicly reported)reported, not verified	22.05.2026

References & sources

github.comwarp-tech/russh/security/advisories/GHSA-45x7-px36-x8w8web
NVD (NIST)vuln/detail/CVE-2023-48795advisory
github.comssh-mitm/ssh-mitm/issues/165web
github.comhierynomus/sshj/issues/916web
github.comjanmojzis/tinyssh/issues/81web
github.comcyd01/KiTTY/issues/520web
github.comproftpd/proftpd/issues/456web
github.comapache/mina-sshd/issues/445web
github.comparamiko/paramiko/issues/2337web
github.comparamiko/paramiko/issues/2337web
github.comPowerShell/Win32-OpenSSH/issues/2189web
github.commwiede/jsch/issues/457web
github.comlibssh2/libssh2/pull/1291web
github.comNixOS/nixpkgs/pull/275249web
github.commwiede/jsch/pull/461web
github.comTeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada289…web
github.commscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3web
github.comconnectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173…web
github.comjtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5web
github.comwarp-tech/russh/commit/1aa340a7df1d5be1c0f4a9e247aade76dfdd2951web

Changes to this CVE

Who changed this CVE and when: NVD (analysis, affected products, CVSS), the CVE publisher (CNA) and additional providers such as CISA (ADP).

15.10.2026Record modifiedMITRE

New references:

and 8 more references

Show 354 original changes

Individual changes of this event as published by NVD
Type	Action	Before	After
Reference	added	—	http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
Reference	added	—	http://seclists.org/fulldisclosure/2024/Mar/21
Reference	added	—	http://www.openwall.com/lists/oss-security/2023/12/18/3
Reference	added	—	http://www.openwall.com/lists/oss-security/2023/12/19/5
Reference	added	—	http://www.openwall.com/lists/oss-security/2023/12/20/3
Reference	added	—	http://www.openwall.com/lists/oss-security/2024/03/06/3
Reference	added	—	http://www.openwall.com/lists/oss-security/2024/04/17/8
Reference	added	—	https://access.redhat.com/security/cve/cve-2023-48795
Reference	added	—	https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/
Reference	added	—	https://bugs.gentoo.org/920280
Reference	added	—	https://bugzilla.redhat.com/show_bug.cgi?id=2254210
Reference	added	—	https://bugzilla.suse.com/show_bug.cgi?id=1217950
Reference	added	—	https://crates.io/crates/thrussh/versions
Reference	added	—	https://filezilla-project.org/versions.php
Reference	added	—	https://forum.netgate.com/topic/184941/terrapin-ssh-attack
Reference	added	—	https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6
Reference	added	—	https://github.com/advisories/GHSA-45x7-px36-x8w8
Reference	added	—	https://github.com/apache/mina-sshd/issues/445
Reference	added	—	https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab
Reference	added	—	https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22
Reference	added	—	https://github.com/cyd01/KiTTY/issues/520
Reference	added	—	https://github.com/drakkan/sftpgo/releases/tag/v2.5.6
Reference	added	—	https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42
Reference	added	—	https://github.com/erlang/otp/releases/tag/OTP-26.2.1
Reference	added	—	https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
Reference	added	—	https://github.com/hierynomus/sshj/issues/916
Reference	added	—	https://github.com/janmojzis/tinyssh/issues/81
Reference	added	—	https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5
Reference	added	—	https://github.com/libssh2/libssh2/pull/1291
Reference	added	—	https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25
Reference	added	—	https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
Reference	added	—	https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15
Reference	added	—	https://github.com/mwiede/jsch/issues/457
Reference	added	—	https://github.com/mwiede/jsch/pull/461
Reference	added	—	https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16
Reference	added	—	https://github.com/NixOS/nixpkgs/pull/275249
Reference	added	—	https://github.com/openssh/openssh-portable/commits/master
Reference	added	—	https://github.com/paramiko/paramiko/issues/2337
Reference	added	—	https://github.com/PowerShell/Win32-OpenSSH/issues/2189
Reference	added	—	https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta
Reference	added	—	https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES
Reference	added	—	https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES
Reference	added	—	https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
Reference	added	—	https://github.com/proftpd/proftpd/issues/456
Reference	added	—	https://github.com/rapier1/hpn-ssh/releases
Reference	added	—	https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
Reference	added	—	https://github.com/ronf/asyncssh/tags
Reference	added	—	https://github.com/ssh-mitm/ssh-mitm/issues/165
Reference	added	—	https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0
Reference	added	—	https://github.com/TeraTermProject/teraterm/releases/tag/v5.1
Reference	added	—	https://github.com/warp-tech/russh/releases/tag/v0.40.2
Reference	added	—	https://gitlab.com/libssh/libssh-mirror/-/tags
Reference	added	—	https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
Reference	added	—	https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg
Reference	added	—	https://help.panic.com/releasenotes/transmit5/
Reference	added	—	https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/
Reference	added	—	https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/
Reference	added	—	https://matt.ucc.asn.au/dropbear/CHANGES
Reference	added	—	https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC
Reference	added	—	https://news.ycombinator.com/item?id=38684904
Reference	added	—	https://news.ycombinator.com/item?id=38685286
Reference	added	—	https://news.ycombinator.com/item?id=38732005
Reference	added	—	https://nova.app/releases/#v11.8
Reference	added	—	https://oryx-embedded.com/download/#changelog
Reference	added	—	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002
Reference	added	—	https://roumenpetrov.info/secsh/#news20231220
Reference	added	—	https://security-tracker.debian.org/tracker/CVE-2023-48795
Reference	added	—	https://security-tracker.debian.org/tracker/source-package/libssh2
Reference	added	—	https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg
Reference	added	—	https://security-tracker.debian.org/tracker/source-package/trilead-ssh2
Reference	added	—	https://security.gentoo.org/glsa/202312-16
Reference	added	—	https://security.gentoo.org/glsa/202312-17
Reference	added	—	https://security.netapp.com/advisory/ntap-20240105-0004/
Reference	added	—	https://support.apple.com/kb/HT214084
Reference	added	—	https://thorntech.com/cve-2023-48795-and-sftp-gateway/
Reference	added	—	https://twitter.com/TrueSkrillor/status/1736774389725565005
Reference	added	—	https://ubuntu.com/security/CVE-2023-48795
Reference	added	—	https://winscp.net/eng/docs/history#6.2.2
Reference	added	—	https://www.bitvise.com/ssh-client-version-history#933
Reference	added	—	https://www.bitvise.com/ssh-server-version-history
Reference	added	—	https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
Reference	added	—	https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
Reference	added	—	https://www.debian.org/security/2023/dsa-5586
Reference	added	—	https://www.debian.org/security/2023/dsa-5588
Reference	added	—	https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc
Reference	added	—	https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508
Reference	added	—	https://www.netsarang.com/en/xshell-update-history/
Reference	added	—	https://www.openssh.com/openbsd.html
Reference	added	—	https://www.openssh.com/txt/release-9.6
Reference	added	—	https://www.openwall.com/lists/oss-security/2023/12/18/2
Reference	added	—	https://www.openwall.com/lists/oss-security/2023/12/20/3
Reference	added	—	https://www.paramiko.org/changelog.html
Reference	added	—	https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/
Reference	added	—	https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/
Reference	added	—	https://www.terrapin-attack.com
Reference	added	—	https://www.theregister.com/2023/12/20/terrapin_attack_ssh
Reference	added	—	https://www.vandyke.com/products/securecrt/history.txt
Reference	removed	http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html	—
Reference	removed	http://seclists.org/fulldisclosure/2024/Mar/21	—
Reference	removed	http://www.openwall.com/lists/oss-security/2023/12/18/3	—
Reference	removed	http://www.openwall.com/lists/oss-security/2023/12/19/5	—
Reference	removed	http://www.openwall.com/lists/oss-security/2023/12/20/3	—
Reference	removed	http://www.openwall.com/lists/oss-security/2024/03/06/3	—
Reference	removed	http://www.openwall.com/lists/oss-security/2024/04/17/8	—
Reference	removed	https://access.redhat.com/security/cve/cve-2023-48795	—
Reference	removed	https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/	—
Reference	removed	https://bugs.gentoo.org/920280	—
Reference	removed	https://bugzilla.redhat.com/show_bug.cgi?id=2254210	—
Reference	removed	https://bugzilla.suse.com/show_bug.cgi?id=1217950	—
Reference	removed	https://crates.io/crates/thrussh/versions	—
Reference	removed	https://filezilla-project.org/versions.php	—
Reference	removed	https://forum.netgate.com/topic/184941/terrapin-ssh-attack	—
Reference	removed	https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6	—
Reference	removed	https://github.com/advisories/GHSA-45x7-px36-x8w8	—
Reference	removed	https://github.com/apache/mina-sshd/issues/445	—
Reference	removed	https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab	—
Reference	removed	https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22	—
Reference	removed	https://github.com/cyd01/KiTTY/issues/520	—
Reference	removed	https://github.com/drakkan/sftpgo/releases/tag/v2.5.6	—
Reference	removed	https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42	—
Reference	removed	https://github.com/erlang/otp/releases/tag/OTP-26.2.1	—
Reference	removed	https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d	—
Reference	removed	https://github.com/hierynomus/sshj/issues/916	—
Reference	removed	https://github.com/janmojzis/tinyssh/issues/81	—
Reference	removed	https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5	—
Reference	removed	https://github.com/libssh2/libssh2/pull/1291	—
Reference	removed	https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25	—
Reference	removed	https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3	—
Reference	removed	https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15	—
Reference	removed	https://github.com/mwiede/jsch/issues/457	—
Reference	removed	https://github.com/mwiede/jsch/pull/461	—
Reference	removed	https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16	—
Reference	removed	https://github.com/NixOS/nixpkgs/pull/275249	—
Reference	removed	https://github.com/openssh/openssh-portable/commits/master	—
Reference	removed	https://github.com/paramiko/paramiko/issues/2337	—
Reference	removed	https://github.com/PowerShell/Win32-OpenSSH/issues/2189	—
Reference	removed	https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta	—
Reference	removed	https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES	—
Reference	removed	https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES	—
Reference	removed	https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES	—
Reference	removed	https://github.com/proftpd/proftpd/issues/456	—
Reference	removed	https://github.com/rapier1/hpn-ssh/releases	—
Reference	removed	https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst	—
Reference	removed	https://github.com/ronf/asyncssh/tags	—
Reference	removed	https://github.com/ssh-mitm/ssh-mitm/issues/165	—
Reference	removed	https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0	—
Reference	removed	https://github.com/TeraTermProject/teraterm/releases/tag/v5.1	—
Reference	removed	https://github.com/warp-tech/russh/releases/tag/v0.40.2	—
Reference	removed	https://gitlab.com/libssh/libssh-mirror/-/tags	—
Reference	removed	https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ	—
Reference	removed	https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg	—
Reference	removed	https://help.panic.com/releasenotes/transmit5/	—
Reference	removed	https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/	—
Reference	removed	https://matt.ucc.asn.au/dropbear/CHANGES	—
Reference	removed	https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC	—
Reference	removed	https://news.ycombinator.com/item?id=38684904	—
Reference	removed	https://news.ycombinator.com/item?id=38685286	—
Reference	removed	https://news.ycombinator.com/item?id=38732005	—
Reference	removed	https://nova.app/releases/#v11.8	—
Reference	removed	https://oryx-embedded.com/download/#changelog	—
Reference	removed	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002	—
Reference	removed	https://roumenpetrov.info/secsh/#news20231220	—
Reference	removed	https://security-tracker.debian.org/tracker/CVE-2023-48795	—
Reference	removed	https://security-tracker.debian.org/tracker/source-package/libssh2	—
Reference	removed	https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg	—
Reference	removed	https://security-tracker.debian.org/tracker/source-package/trilead-ssh2	—
Reference	removed	https://security.gentoo.org/glsa/202312-16	—
Reference	removed	https://security.gentoo.org/glsa/202312-17	—
Reference	removed	https://security.netapp.com/advisory/ntap-20240105-0004/	—
Reference	removed	https://support.apple.com/kb/HT214084	—
Reference	removed	https://thorntech.com/cve-2023-48795-and-sftp-gateway/	—
Reference	removed	https://twitter.com/TrueSkrillor/status/1736774389725565005	—
Reference	removed	https://ubuntu.com/security/CVE-2023-48795	—
Reference	removed	https://winscp.net/eng/docs/history#6.2.2	—
Reference	removed	https://www.bitvise.com/ssh-client-version-history#933	—
Reference	removed	https://www.bitvise.com/ssh-server-version-history	—
Reference	removed	https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html	—
Reference	removed	https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update	—
Reference	removed	https://www.debian.org/security/2023/dsa-5586	—
Reference	removed	https://www.debian.org/security/2023/dsa-5588	—
Reference	removed	https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc	—
Reference	removed	https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508	—
Reference	removed	https://www.netsarang.com/en/xshell-update-history/	—
Reference	removed	https://www.openssh.com/openbsd.html	—
Reference	removed	https://www.openssh.com/txt/release-9.6	—
Reference	removed	https://www.openwall.com/lists/oss-security/2023/12/18/2	—
Reference	removed	https://www.openwall.com/lists/oss-security/2023/12/20/3	—
Reference	removed	https://www.paramiko.org/changelog.html	—
Reference	removed	https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/	—
Reference	removed	https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/	—
Reference	removed	https://www.terrapin-attack.com	—
Reference	removed	https://www.theregister.com/2023/12/20/terrapin_attack_ssh	—
Reference	removed	https://www.vandyke.com/products/securecrt/history.txt	—
Reference type	removed	http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html Types: Third Party Advisory, VDB Entry	—
Reference type	removed	http://seclists.org/fulldisclosure/2024/Mar/21 Types: Mailing List, Third Party Advisory	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2023/12/18/3 Types: Mailing List	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2023/12/19/5 Types: Mailing List	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2023/12/20/3 Types: Mailing List, Mitigation	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2024/03/06/3 Types: Mailing List	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2024/04/17/8 Types: Mailing List	—
Reference type	removed	https://access.redhat.com/security/cve/cve-2023-48795 Types: Third Party Advisory	—
Reference type	removed	https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/ Types: Press/Media Coverage	—
Reference type	removed	https://bugs.gentoo.org/920280 Types: Issue Tracking	—
Reference type	removed	https://bugzilla.redhat.com/show_bug.cgi?id=2254210 Types: Issue Tracking	—
Reference type	removed	https://bugzilla.suse.com/show_bug.cgi?id=1217950 Types: Issue Tracking	—
Reference type	removed	https://crates.io/crates/thrussh/versions Types: Release Notes	—
Reference type	removed	https://filezilla-project.org/versions.php Types: Release Notes	—
Reference type	removed	https://forum.netgate.com/topic/184941/terrapin-ssh-attack Types: Issue Tracking	—
Reference type	removed	https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6 Types: Patch	—
Reference type	removed	https://github.com/advisories/GHSA-45x7-px36-x8w8 Types: Third Party Advisory	—
Reference type	removed	https://github.com/apache/mina-sshd/issues/445 Types: Issue Tracking	—
Reference type	removed	https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab Types: Patch	—
Reference type	removed	https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22 Types: Third Party Advisory	—
Reference type	removed	https://github.com/cyd01/KiTTY/issues/520 Types: Issue Tracking	—
Reference type	removed	https://github.com/drakkan/sftpgo/releases/tag/v2.5.6 Types: Release Notes	—
Reference type	removed	https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42 Types: Patch	—
Reference type	removed	https://github.com/erlang/otp/releases/tag/OTP-26.2.1 Types: Release Notes	—
Reference type	removed	https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d Types: Patch	—
Reference type	removed	https://github.com/hierynomus/sshj/issues/916 Types: Issue Tracking	—
Reference type	removed	https://github.com/janmojzis/tinyssh/issues/81 Types: Issue Tracking	—
Reference type	removed	https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5 Types: Patch	—
Reference type	removed	https://github.com/libssh2/libssh2/pull/1291 Types: Mitigation	—
Reference type	removed	https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25 Types: Patch	—
Reference type	removed	https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3 Types: Patch	—
Reference type	removed	https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15 Types: Product	—
Reference type	removed	https://github.com/mwiede/jsch/issues/457 Types: Issue Tracking	—
Reference type	removed	https://github.com/mwiede/jsch/pull/461 Types: Release Notes	—
Reference type	removed	https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16 Types: Patch	—
Reference type	removed	https://github.com/NixOS/nixpkgs/pull/275249 Types: Release Notes	—
Reference type	removed	https://github.com/openssh/openssh-portable/commits/master Types: Patch	—
Reference type	removed	https://github.com/paramiko/paramiko/issues/2337 Types: Issue Tracking	—
Reference type	removed	https://github.com/PowerShell/Win32-OpenSSH/issues/2189 Types: Issue Tracking	—
Reference type	removed	https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta Types: Release Notes	—
Reference type	removed	https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES Types: Release Notes	—
Reference type	removed	https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES Types: Release Notes	—
Reference type	removed	https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES Types: Release Notes	—
Reference type	removed	https://github.com/proftpd/proftpd/issues/456 Types: Issue Tracking	—
Reference type	removed	https://github.com/rapier1/hpn-ssh/releases Types: Release Notes	—
Reference type	removed	https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst Types: Release Notes	—
Reference type	removed	https://github.com/ronf/asyncssh/tags Types: Release Notes	—
Reference type	removed	https://github.com/ssh-mitm/ssh-mitm/issues/165 Types: Issue Tracking	—
Reference type	removed	https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0 Types: Patch	—
Reference type	removed	https://github.com/TeraTermProject/teraterm/releases/tag/v5.1 Types: Release Notes	—
Reference type	removed	https://github.com/warp-tech/russh/releases/tag/v0.40.2 Types: Release Notes	—
Reference type	removed	https://gitlab.com/libssh/libssh-mirror/-/tags Types: Release Notes	—
Reference type	removed	https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ Types: Mailing List	—
Reference type	removed	https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg Types: Mailing List	—
Reference type	removed	https://help.panic.com/releasenotes/transmit5/ Types: Release Notes	—
Reference type	removed	https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/ Types: Press/Media Coverage	—
Reference type	removed	https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html Types: Mailing List	—
Reference type	removed	https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/ Types: Vendor Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://matt.ucc.asn.au/dropbear/CHANGES Types: Release Notes	—
Reference type	removed	https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC Types: Patch	—
Reference type	removed	https://news.ycombinator.com/item?id=38684904 Types: Issue Tracking	—
Reference type	removed	https://news.ycombinator.com/item?id=38685286 Types: Issue Tracking	—
Reference type	removed	https://news.ycombinator.com/item?id=38732005 Types: Issue Tracking	—
Reference type	removed	https://nova.app/releases/#v11.8 Types: Release Notes	—
Reference type	removed	https://oryx-embedded.com/download/#changelog Types: Release Notes	—
Reference type	removed	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002 Types: Third Party Advisory	—
Reference type	removed	https://roumenpetrov.info/secsh/#news20231220 Types: Release Notes	—
Reference type	removed	https://security-tracker.debian.org/tracker/CVE-2023-48795 Types: Vendor Advisory	—
Reference type	removed	https://security-tracker.debian.org/tracker/source-package/libssh2 Types: Vendor Advisory	—
Reference type	removed	https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg Types: Vendor Advisory	—
Reference type	removed	https://security-tracker.debian.org/tracker/source-package/trilead-ssh2 Types: Issue Tracking	—
Reference type	removed	https://security.gentoo.org/glsa/202312-16 Types: Third Party Advisory	—
Reference type	removed	https://security.gentoo.org/glsa/202312-17 Types: Third Party Advisory	—
Reference type	removed	https://security.netapp.com/advisory/ntap-20240105-0004/ Types: Third Party Advisory	—
Reference type	removed	https://support.apple.com/kb/HT214084 Types: Third Party Advisory	—
Reference type	removed	https://thorntech.com/cve-2023-48795-and-sftp-gateway/ Types: Third Party Advisory	—
Reference type	removed	https://twitter.com/TrueSkrillor/status/1736774389725565005 Types: Press/Media Coverage	—
Reference type	removed	https://ubuntu.com/security/CVE-2023-48795 Types: Vendor Advisory	—
Reference type	removed	https://winscp.net/eng/docs/history#6.2.2 Types: Release Notes	—
Reference type	removed	https://www.bitvise.com/ssh-client-version-history#933 Types: Release Notes	—
Reference type	removed	https://www.bitvise.com/ssh-server-version-history Types: Release Notes	—
Reference type	removed	https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html Types: Release Notes	—
Reference type	removed	https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update Types: Release Notes	—
Reference type	removed	https://www.debian.org/security/2023/dsa-5586 Types: Issue Tracking	—
Reference type	removed	https://www.debian.org/security/2023/dsa-5588 Types: Issue Tracking	—
Reference type	removed	https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc Types: Release Notes	—
Reference type	removed	https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508 Types: Vendor Advisory	—
Reference type	removed	https://www.netsarang.com/en/xshell-update-history/ Types: Release Notes	—
Reference type	removed	https://www.openssh.com/openbsd.html Types: Release Notes	—
Reference type	removed	https://www.openssh.com/txt/release-9.6 Types: Release Notes	—
Reference type	removed	https://www.openwall.com/lists/oss-security/2023/12/18/2 Types: Mailing List	—
Reference type	removed	https://www.openwall.com/lists/oss-security/2023/12/20/3 Types: Mailing List, Mitigation	—
Reference type	removed	https://www.paramiko.org/changelog.html Types: Release Notes	—
Reference type	removed	https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/ Types: Issue Tracking	—
Reference type	removed	https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/ Types: Press/Media Coverage	—
Reference type	removed	https://www.terrapin-attack.com Types: Exploit	—
Reference type	removed	https://www.theregister.com/2023/12/20/terrapin_attack_ssh Types: Press/Media Coverage	—
Reference type	removed	https://www.vandyke.com/products/securecrt/history.txt Types: Release Notes	—

Source identifier: cve@mitre.org

15.10.2026Record modifiedCVE Program

New references:

and 8 more references

Show 388 original changes

Individual changes of this event as published by NVD
Type	Action	Before	After
Reference	added	—	http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
Reference	added	—	http://seclists.org/fulldisclosure/2024/Mar/21
Reference	added	—	http://www.openwall.com/lists/oss-security/2023/12/18/3
Reference	added	—	http://www.openwall.com/lists/oss-security/2023/12/19/5
Reference	added	—	http://www.openwall.com/lists/oss-security/2023/12/20/3
Reference	added	—	http://www.openwall.com/lists/oss-security/2024/03/06/3
Reference	added	—	http://www.openwall.com/lists/oss-security/2024/04/17/8
Reference	added	—	https://access.redhat.com/security/cve/cve-2023-48795
Reference	added	—	https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/
Reference	added	—	https://bugs.gentoo.org/920280
Reference	added	—	https://bugzilla.redhat.com/show_bug.cgi?id=2254210
Reference	added	—	https://bugzilla.suse.com/show_bug.cgi?id=1217950
Reference	added	—	https://crates.io/crates/thrussh/versions
Reference	added	—	https://filezilla-project.org/versions.php
Reference	added	—	https://forum.netgate.com/topic/184941/terrapin-ssh-attack
Reference	added	—	https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6
Reference	added	—	https://github.com/advisories/GHSA-45x7-px36-x8w8
Reference	added	—	https://github.com/apache/mina-sshd/issues/445
Reference	added	—	https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab
Reference	added	—	https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22
Reference	added	—	https://github.com/cyd01/KiTTY/issues/520
Reference	added	—	https://github.com/drakkan/sftpgo/releases/tag/v2.5.6
Reference	added	—	https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42
Reference	added	—	https://github.com/erlang/otp/releases/tag/OTP-26.2.1
Reference	added	—	https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d
Reference	added	—	https://github.com/hierynomus/sshj/issues/916
Reference	added	—	https://github.com/janmojzis/tinyssh/issues/81
Reference	added	—	https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5
Reference	added	—	https://github.com/libssh2/libssh2/pull/1291
Reference	added	—	https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25
Reference	added	—	https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3
Reference	added	—	https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15
Reference	added	—	https://github.com/mwiede/jsch/issues/457
Reference	added	—	https://github.com/mwiede/jsch/pull/461
Reference	added	—	https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16
Reference	added	—	https://github.com/NixOS/nixpkgs/pull/275249
Reference	added	—	https://github.com/openssh/openssh-portable/commits/master
Reference	added	—	https://github.com/paramiko/paramiko/issues/2337
Reference	added	—	https://github.com/PowerShell/Win32-OpenSSH/issues/2189
Reference	added	—	https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta
Reference	added	—	https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES
Reference	added	—	https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES
Reference	added	—	https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES
Reference	added	—	https://github.com/proftpd/proftpd/issues/456
Reference	added	—	https://github.com/rapier1/hpn-ssh/releases
Reference	added	—	https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
Reference	added	—	https://github.com/ronf/asyncssh/tags
Reference	added	—	https://github.com/ssh-mitm/ssh-mitm/issues/165
Reference	added	—	https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0
Reference	added	—	https://github.com/TeraTermProject/teraterm/releases/tag/v5.1
Reference	added	—	https://github.com/warp-tech/russh/releases/tag/v0.40.2
Reference	added	—	https://gitlab.com/libssh/libssh-mirror/-/tags
Reference	added	—	https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
Reference	added	—	https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg
Reference	added	—	https://help.panic.com/releasenotes/transmit5/
Reference	added	—	https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/
Reference	added	—	https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html
Reference	added	—	https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/
Reference	added	—	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/
Reference	added	—	https://matt.ucc.asn.au/dropbear/CHANGES
Reference	added	—	https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC
Reference	added	—	https://news.ycombinator.com/item?id=38684904
Reference	added	—	https://news.ycombinator.com/item?id=38685286
Reference	added	—	https://news.ycombinator.com/item?id=38732005
Reference	added	—	https://nova.app/releases/#v11.8
Reference	added	—	https://oryx-embedded.com/download/#changelog
Reference	added	—	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002
Reference	added	—	https://roumenpetrov.info/secsh/#news20231220
Reference	added	—	https://security-tracker.debian.org/tracker/CVE-2023-48795
Reference	added	—	https://security-tracker.debian.org/tracker/source-package/libssh2
Reference	added	—	https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg
Reference	added	—	https://security-tracker.debian.org/tracker/source-package/trilead-ssh2
Reference	added	—	https://security.gentoo.org/glsa/202312-16
Reference	added	—	https://security.gentoo.org/glsa/202312-17
Reference	added	—	https://security.netapp.com/advisory/ntap-20240105-0004/
Reference	added	—	https://support.apple.com/kb/HT214084
Reference	added	—	https://thorntech.com/cve-2023-48795-and-sftp-gateway/
Reference	added	—	https://twitter.com/TrueSkrillor/status/1736774389725565005
Reference	added	—	https://ubuntu.com/security/CVE-2023-48795
Reference	added	—	https://winscp.net/eng/docs/history#6.2.2
Reference	added	—	https://www.bitvise.com/ssh-client-version-history#933
Reference	added	—	https://www.bitvise.com/ssh-server-version-history
Reference	added	—	https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html
Reference	added	—	https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update
Reference	added	—	https://www.debian.org/security/2023/dsa-5586
Reference	added	—	https://www.debian.org/security/2023/dsa-5588
Reference	added	—	https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc
Reference	added	—	https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508
Reference	added	—	https://www.netsarang.com/en/xshell-update-history/
Reference	added	—	https://www.openssh.com/openbsd.html
Reference	added	—	https://www.openssh.com/txt/release-9.6
Reference	added	—	https://www.openwall.com/lists/oss-security/2023/12/18/2
Reference	added	—	https://www.openwall.com/lists/oss-security/2023/12/20/3
Reference	added	—	https://www.paramiko.org/changelog.html
Reference	added	—	https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/
Reference	added	—	https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/
Reference	added	—	https://www.terrapin-attack.com
Reference	added	—	https://www.theregister.com/2023/12/20/terrapin_attack_ssh
Reference	added	—	https://www.vandyke.com/products/securecrt/history.txt
Reference	added	—	https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit
Reference	added	—	https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability
Reference	removed	http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html	—
Reference	removed	http://seclists.org/fulldisclosure/2024/Mar/21	—
Reference	removed	http://www.openwall.com/lists/oss-security/2023/12/18/3	—
Reference	removed	http://www.openwall.com/lists/oss-security/2023/12/19/5	—
Reference	removed	http://www.openwall.com/lists/oss-security/2023/12/20/3	—
Reference	removed	http://www.openwall.com/lists/oss-security/2024/03/06/3	—
Reference	removed	http://www.openwall.com/lists/oss-security/2024/04/17/8	—
Reference	removed	https://access.redhat.com/security/cve/cve-2023-48795	—
Reference	removed	https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/	—
Reference	removed	https://bugs.gentoo.org/920280	—
Reference	removed	https://bugzilla.redhat.com/show_bug.cgi?id=2254210	—
Reference	removed	https://bugzilla.suse.com/show_bug.cgi?id=1217950	—
Reference	removed	https://crates.io/crates/thrussh/versions	—
Reference	removed	https://filezilla-project.org/versions.php	—
Reference	removed	https://forum.netgate.com/topic/184941/terrapin-ssh-attack	—
Reference	removed	https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6	—
Reference	removed	https://github.com/advisories/GHSA-45x7-px36-x8w8	—
Reference	removed	https://github.com/apache/mina-sshd/issues/445	—
Reference	removed	https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab	—
Reference	removed	https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22	—
Reference	removed	https://github.com/cyd01/KiTTY/issues/520	—
Reference	removed	https://github.com/drakkan/sftpgo/releases/tag/v2.5.6	—
Reference	removed	https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42	—
Reference	removed	https://github.com/erlang/otp/releases/tag/OTP-26.2.1	—
Reference	removed	https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d	—
Reference	removed	https://github.com/hierynomus/sshj/issues/916	—
Reference	removed	https://github.com/janmojzis/tinyssh/issues/81	—
Reference	removed	https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5	—
Reference	removed	https://github.com/libssh2/libssh2/pull/1291	—
Reference	removed	https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25	—
Reference	removed	https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3	—
Reference	removed	https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15	—
Reference	removed	https://github.com/mwiede/jsch/issues/457	—
Reference	removed	https://github.com/mwiede/jsch/pull/461	—
Reference	removed	https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16	—
Reference	removed	https://github.com/NixOS/nixpkgs/pull/275249	—
Reference	removed	https://github.com/openssh/openssh-portable/commits/master	—
Reference	removed	https://github.com/paramiko/paramiko/issues/2337	—
Reference	removed	https://github.com/PowerShell/Win32-OpenSSH/issues/2189	—
Reference	removed	https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta	—
Reference	removed	https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES	—
Reference	removed	https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES	—
Reference	removed	https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES	—
Reference	removed	https://github.com/proftpd/proftpd/issues/456	—
Reference	removed	https://github.com/rapier1/hpn-ssh/releases	—
Reference	removed	https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst	—
Reference	removed	https://github.com/ronf/asyncssh/tags	—
Reference	removed	https://github.com/ssh-mitm/ssh-mitm/issues/165	—
Reference	removed	https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0	—
Reference	removed	https://github.com/TeraTermProject/teraterm/releases/tag/v5.1	—
Reference	removed	https://github.com/warp-tech/russh/releases/tag/v0.40.2	—
Reference	removed	https://gitlab.com/libssh/libssh-mirror/-/tags	—
Reference	removed	https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ	—
Reference	removed	https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg	—
Reference	removed	https://help.panic.com/releasenotes/transmit5/	—
Reference	removed	https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html	—
Reference	removed	https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/	—
Reference	removed	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/	—
Reference	removed	https://matt.ucc.asn.au/dropbear/CHANGES	—
Reference	removed	https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC	—
Reference	removed	https://news.ycombinator.com/item?id=38684904	—
Reference	removed	https://news.ycombinator.com/item?id=38685286	—
Reference	removed	https://news.ycombinator.com/item?id=38732005	—
Reference	removed	https://nova.app/releases/#v11.8	—
Reference	removed	https://oryx-embedded.com/download/#changelog	—
Reference	removed	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002	—
Reference	removed	https://roumenpetrov.info/secsh/#news20231220	—
Reference	removed	https://security-tracker.debian.org/tracker/CVE-2023-48795	—
Reference	removed	https://security-tracker.debian.org/tracker/source-package/libssh2	—
Reference	removed	https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg	—
Reference	removed	https://security-tracker.debian.org/tracker/source-package/trilead-ssh2	—
Reference	removed	https://security.gentoo.org/glsa/202312-16	—
Reference	removed	https://security.gentoo.org/glsa/202312-17	—
Reference	removed	https://security.netapp.com/advisory/ntap-20240105-0004/	—
Reference	removed	https://support.apple.com/kb/HT214084	—
Reference	removed	https://thorntech.com/cve-2023-48795-and-sftp-gateway/	—
Reference	removed	https://twitter.com/TrueSkrillor/status/1736774389725565005	—
Reference	removed	https://ubuntu.com/security/CVE-2023-48795	—
Reference	removed	https://winscp.net/eng/docs/history#6.2.2	—
Reference	removed	https://www.bitvise.com/ssh-client-version-history#933	—
Reference	removed	https://www.bitvise.com/ssh-server-version-history	—
Reference	removed	https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html	—
Reference	removed	https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update	—
Reference	removed	https://www.debian.org/security/2023/dsa-5586	—
Reference	removed	https://www.debian.org/security/2023/dsa-5588	—
Reference	removed	https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc	—
Reference	removed	https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508	—
Reference	removed	https://www.netsarang.com/en/xshell-update-history/	—
Reference	removed	https://www.openssh.com/openbsd.html	—
Reference	removed	https://www.openssh.com/txt/release-9.6	—
Reference	removed	https://www.openwall.com/lists/oss-security/2023/12/18/2	—
Reference	removed	https://www.openwall.com/lists/oss-security/2023/12/20/3	—
Reference	removed	https://www.paramiko.org/changelog.html	—
Reference	removed	https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/	—
Reference	removed	https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/	—
Reference	removed	https://www.terrapin-attack.com	—
Reference	removed	https://www.theregister.com/2023/12/20/terrapin_attack_ssh	—
Reference	removed	https://www.vandyke.com/products/securecrt/history.txt	—
Reference	removed	https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit	—
Reference	removed	https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability	—
Reference type	removed	http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html Types: Third Party Advisory, VDB Entry	—
Reference type	removed	http://seclists.org/fulldisclosure/2024/Mar/21 Types: Mailing List, Third Party Advisory	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2023/12/18/3 Types: Mailing List	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2023/12/19/5 Types: Mailing List	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2023/12/20/3 Types: Mailing List, Mitigation	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2024/03/06/3 Types: Mailing List	—
Reference type	removed	http://www.openwall.com/lists/oss-security/2024/04/17/8 Types: Mailing List	—
Reference type	removed	https://access.redhat.com/security/cve/cve-2023-48795 Types: Third Party Advisory	—
Reference type	removed	https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/ Types: Press/Media Coverage	—
Reference type	removed	https://bugs.gentoo.org/920280 Types: Issue Tracking	—
Reference type	removed	https://bugzilla.redhat.com/show_bug.cgi?id=2254210 Types: Issue Tracking	—
Reference type	removed	https://bugzilla.suse.com/show_bug.cgi?id=1217950 Types: Issue Tracking	—
Reference type	removed	https://crates.io/crates/thrussh/versions Types: Release Notes	—
Reference type	removed	https://filezilla-project.org/versions.php Types: Release Notes	—
Reference type	removed	https://forum.netgate.com/topic/184941/terrapin-ssh-attack Types: Issue Tracking	—
Reference type	removed	https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6 Types: Patch	—
Reference type	removed	https://github.com/advisories/GHSA-45x7-px36-x8w8 Types: Third Party Advisory	—
Reference type	removed	https://github.com/apache/mina-sshd/issues/445 Types: Issue Tracking	—
Reference type	removed	https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab Types: Patch	—
Reference type	removed	https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22 Types: Third Party Advisory	—
Reference type	removed	https://github.com/cyd01/KiTTY/issues/520 Types: Issue Tracking	—
Reference type	removed	https://github.com/drakkan/sftpgo/releases/tag/v2.5.6 Types: Release Notes	—
Reference type	removed	https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42 Types: Patch	—
Reference type	removed	https://github.com/erlang/otp/releases/tag/OTP-26.2.1 Types: Release Notes	—
Reference type	removed	https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d Types: Patch	—
Reference type	removed	https://github.com/hierynomus/sshj/issues/916 Types: Issue Tracking	—
Reference type	removed	https://github.com/janmojzis/tinyssh/issues/81 Types: Issue Tracking	—
Reference type	removed	https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5 Types: Patch	—
Reference type	removed	https://github.com/libssh2/libssh2/pull/1291 Types: Mitigation	—
Reference type	removed	https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25 Types: Patch	—
Reference type	removed	https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3 Types: Patch	—
Reference type	removed	https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15 Types: Product	—
Reference type	removed	https://github.com/mwiede/jsch/issues/457 Types: Issue Tracking	—
Reference type	removed	https://github.com/mwiede/jsch/pull/461 Types: Release Notes	—
Reference type	removed	https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16 Types: Patch	—
Reference type	removed	https://github.com/NixOS/nixpkgs/pull/275249 Types: Release Notes	—
Reference type	removed	https://github.com/openssh/openssh-portable/commits/master Types: Patch	—
Reference type	removed	https://github.com/paramiko/paramiko/issues/2337 Types: Issue Tracking	—
Reference type	removed	https://github.com/PowerShell/Win32-OpenSSH/issues/2189 Types: Issue Tracking	—
Reference type	removed	https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta Types: Release Notes	—
Reference type	removed	https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES Types: Release Notes	—
Reference type	removed	https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES Types: Release Notes	—
Reference type	removed	https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES Types: Release Notes	—
Reference type	removed	https://github.com/proftpd/proftpd/issues/456 Types: Issue Tracking	—
Reference type	removed	https://github.com/rapier1/hpn-ssh/releases Types: Release Notes	—
Reference type	removed	https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst Types: Release Notes	—
Reference type	removed	https://github.com/ronf/asyncssh/tags Types: Release Notes	—
Reference type	removed	https://github.com/ssh-mitm/ssh-mitm/issues/165 Types: Issue Tracking	—
Reference type	removed	https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0 Types: Patch	—
Reference type	removed	https://github.com/TeraTermProject/teraterm/releases/tag/v5.1 Types: Release Notes	—
Reference type	removed	https://github.com/warp-tech/russh/releases/tag/v0.40.2 Types: Release Notes	—
Reference type	removed	https://gitlab.com/libssh/libssh-mirror/-/tags Types: Release Notes	—
Reference type	removed	https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ Types: Mailing List	—
Reference type	removed	https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg Types: Mailing List	—
Reference type	removed	https://help.panic.com/releasenotes/transmit5/ Types: Release Notes	—
Reference type	removed	https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/ Types: Press/Media Coverage	—
Reference type	removed	https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html Types: Mailing List	—
Reference type	removed	https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/33XHJUB6ROFUOH2OQNENFROTVH6MHSHA/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3CAYYW35MUTNO65RVAELICTNZZFMT2XS/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3JIMLVBDWOP4FUPXPTB4PGHHIOMGFLQE/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YQLUQWLIHDB5QCXQEX7HXHAWMOKPP5O/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y74KVCPEPT4MVU3LHDWCNNOXOE5ZLUR/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/APYIXIQOVDCRWLHTGB4VYMAUIAQLKYJ3/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL5KTLOSLH2KHRN4HCXJPK3JUVLDGEL6/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C3AFMZ6MH2UHHOPIWT5YLSFV3D2VB3AC/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHITS4PUOZAKFIUBQAQZC7JWXMOYE4B/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F7EYCFQCTSGJXWO3ZZ44MGKFC5HA7G3Y/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HYEDEXIKFKTUJIN43RG4B7T5ZS6MHUSP/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I724O3LSRCPO4WNVIXTZCT4VVRMXMMSG/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KEOTKBUPZXHE3F352JBYNTSNRXYLWD6P/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KMZCVGUGJZZVDPCVDA7TEB22VUCNEXDD/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L5Y6MNNVAPIJSXJERQ6PKZVCIUXSNJK7/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LZQVUHWVWRH73YBXUQJOD6CKHDQBU3DM/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MKQRBF3DWMWPH36LBCOBUTSIZRTPEZXB/ Types: Vendor Advisory	—
Reference type	removed	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QI3EHAHABFQK7OABNCSF5GMYP6TONTI7/ Types: Mailing List, Third Party Advisory	—
Reference type	removed	https://matt.ucc.asn.au/dropbear/CHANGES Types: Release Notes	—
Reference type	removed	https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC Types: Patch	—
Reference type	removed	https://news.ycombinator.com/item?id=38684904 Types: Issue Tracking	—
Reference type	removed	https://news.ycombinator.com/item?id=38685286 Types: Issue Tracking	—
Reference type	removed	https://news.ycombinator.com/item?id=38732005 Types: Issue Tracking	—
Reference type	removed	https://nova.app/releases/#v11.8 Types: Release Notes	—
Reference type	removed	https://oryx-embedded.com/download/#changelog Types: Release Notes	—
Reference type	removed	https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002 Types: Third Party Advisory	—
Reference type	removed	https://roumenpetrov.info/secsh/#news20231220 Types: Release Notes	—
Reference type	removed	https://security-tracker.debian.org/tracker/CVE-2023-48795 Types: Vendor Advisory	—
Reference type	removed	https://security-tracker.debian.org/tracker/source-package/libssh2 Types: Vendor Advisory	—
Reference type	removed	https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg Types: Vendor Advisory	—
Reference type	removed	https://security-tracker.debian.org/tracker/source-package/trilead-ssh2 Types: Issue Tracking	—
Reference type	removed	https://security.gentoo.org/glsa/202312-16 Types: Third Party Advisory	—
Reference type	removed	https://security.gentoo.org/glsa/202312-17 Types: Third Party Advisory	—
Reference type	removed	https://security.netapp.com/advisory/ntap-20240105-0004/ Types: Third Party Advisory	—
Reference type	removed	https://support.apple.com/kb/HT214084 Types: Third Party Advisory	—
Reference type	removed	https://thorntech.com/cve-2023-48795-and-sftp-gateway/ Types: Third Party Advisory	—
Reference type	removed	https://twitter.com/TrueSkrillor/status/1736774389725565005 Types: Press/Media Coverage	—
Reference type	removed	https://ubuntu.com/security/CVE-2023-48795 Types: Vendor Advisory	—
Reference type	removed	https://winscp.net/eng/docs/history#6.2.2 Types: Release Notes	—
Reference type	removed	https://www.bitvise.com/ssh-client-version-history#933 Types: Release Notes	—
Reference type	removed	https://www.bitvise.com/ssh-server-version-history Types: Release Notes	—
Reference type	removed	https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html Types: Release Notes	—
Reference type	removed	https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update Types: Release Notes	—
Reference type	removed	https://www.debian.org/security/2023/dsa-5586 Types: Issue Tracking	—
Reference type	removed	https://www.debian.org/security/2023/dsa-5588 Types: Issue Tracking	—
Reference type	removed	https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc Types: Release Notes	—
Reference type	removed	https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508 Types: Vendor Advisory	—
Reference type	removed	https://www.netsarang.com/en/xshell-update-history/ Types: Release Notes	—
Reference type	removed	https://www.openssh.com/openbsd.html Types: Release Notes	—
Reference type	removed	https://www.openssh.com/txt/release-9.6 Types: Release Notes	—
Reference type	removed	https://www.openwall.com/lists/oss-security/2023/12/18/2 Types: Mailing List	—
Reference type	removed	https://www.openwall.com/lists/oss-security/2023/12/20/3 Types: Mailing List, Mitigation	—
Reference type	removed	https://www.paramiko.org/changelog.html Types: Release Notes	—
Reference type	removed	https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/ Types: Issue Tracking	—
Reference type	removed	https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/ Types: Press/Media Coverage	—
Reference type	removed	https://www.terrapin-attack.com Types: Exploit	—
Reference type	removed	https://www.theregister.com/2023/12/20/terrapin_attack_ssh Types: Press/Media Coverage	—
Reference type	removed	https://www.vandyke.com/products/securecrt/history.txt Types: Release Notes	—
Reference type	removed	https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabilit Types: Exploit, Third Party Advisory	—
Reference type	removed	https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerability Types: Exploit, Third Party Advisory	—

Source identifier: af854a3a-2127-422b-91ae-364da2661108

15.10.2026Record modifiedSiemens ADP

New references:

and 1 more reference

Show 11 original changes

Individual changes of this event as published by NVD
Type	Action	Before	After
Affected versions (publisher)	added	—	Affected value modified. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2023/48xxx/CVE-2023-48795.json">CVE-2023-48795</a>
Reference	added	—	https://cert-portal.siemens.com/productcert/html/ssa-082556.html
Reference	added	—	https://cert-portal.siemens.com/productcert/html/ssa-364175.html
Reference	added	—	https://cert-portal.siemens.com/productcert/html/ssa-769027.html
Reference	added	—	https://cert-portal.siemens.com/productcert/html/ssa-794697.html
Reference	added	—	https://cert-portal.siemens.com/productcert/html/ssa-915275.html
Reference	removed	https://cert-portal.siemens.com/productcert/html/ssa-082556.html	—
Reference	removed	https://cert-portal.siemens.com/productcert/html/ssa-364175.html	—
Reference	removed	https://cert-portal.siemens.com/productcert/html/ssa-769027.html	—
Reference	removed	https://cert-portal.siemens.com/productcert/html/ssa-794697.html	—
Reference	removed	https://cert-portal.siemens.com/productcert/html/ssa-915275.html	—

Source identifier: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Embed badge

Show the severity and KEV status of this vulnerability on your site – with a link back here. The image is updated hourly.

<a href="https://intel.neosec.eu/en/cve/CVE-2023-48795"><img src="https://intel.neosec.eu/badge/cve/CVE-2023-48795.svg?lang=en" alt="CVE-2023-48795 – NEOSEC Intel" height="20"></a>