Alpine/libssh2: medium 5.9
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from
Action: Upgrade libssh2 to 1.11.0-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.11.0-r1 | - |
Fixed versions
| 1.11.0-r1 |
Sources
- osv: ALPINE-CVE-2023-48795#Alpine:v3.21/libssh2
- https://security.alpinelinux.org/vuln/CVE-2023-48795
published · modified · JSON