Alpine/dropbear: medium 5.9
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from
Action: Upgrade dropbear to 2022.83-r4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2022.83-r4 | - |
Fixed versions
| 2022.83-r4 |
Sources
- osv: ALPINE-CVE-2023-48795#Alpine:v3.20/dropbear
- https://security.alpinelinux.org/vuln/CVE-2023-48795
published · modified · JSON