OpenSSH: Schwachstelle ermöglicht Codeausführung
NEOSEC enrichment — no mirror of the original source
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH ausnutzen, um beliebigen Programmcode auszuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2023-18191 linked CVE
Open advisory with all CVEs
More on OpenSSH
Other advisories
- CriticalCVE-2026-123158CVE-2026-123158 affecting OpenSSH on Linux
- HighCVE-2026-59995OpenSSH: Mehrere Schwachstellen
- CriticalCVE-2026-123158sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for a password authentication bypass (related to misinterpretation of whether a string is intended to be a password hash). For some configurations of accounts, any password between 256 and 1024 characters succeeds. An example of a platform using musl libc without PAM is Alpine Linux.
- Not ratedosv:ROOT-OS-ALPINE-318-CVE-2023-51385CVE-2023-51385 in openssh - Patched by Root
- Not ratedosv:ROOT-OS-ALPINE-318-CVE-2023-51384CVE-2023-51384 in openssh - Patched by Root
- CriticalCVE-2026-123158OpenSSH: Schwachstelle ermöglicht Erlangen von Administratorrechten
- CriticalCVE-2026-123158OpenBSD OpenSSH: Umgehung der Authentifizierung
- Not ratedosv:AZL-112871CVE-2026-123158 affecting package openssh 9.8p1-10
Other news entries
- New OpenSSH VulnerabilityNewsSchneier on Security
- Angriffswarnung für GPUStack, FreeSwitch, OpenSSH und IBM Aspera FaspexNewsheise Security
- CISA Warns of Active Exploitation of OpenSSH, GPUStack, FreeSWITCH, and IBM FlawsNewsThe Hacker News
- Hackers exploit SSHole OpenSSH flaw to breach Linux systemsNewsBleepingComputer
- Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSHNewsSecurityWeek
- Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on HoneypotNewsThe Hacker News
- OpenSSH Rushes Patches for ‘SSHole’ Authentication BypassNewsSecurityWeek
- Fehler bei Passwortprüfung: Angreifer können über OpenSSH Linux-Konten kapernNewsGolem.de — Security
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-1819
ID