Debian/phpseclib: medium 5.9
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from
Action: Upgrade phpseclib to 1.0.20-1+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.20-1+deb12u1 | - |
Fixed versions
| 1.0.20-1+deb12u1 |
Sources
- osv: DEBIAN-CVE-2023-48795#Debian:12/phpseclib
- https://security-tracker.debian.org/tracker/CVE-2023-48795
published · modified · JSON