Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-gwcg-wcrc-j5gv

published 1 year ago

Summary

No summary available.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	kubectl-bash-completion-1.27	All versions
Wolfi	wolfi	kubectl-bash-completion-1.27	All versions

Original advisory text

CGA-gwcg-wcrc-j5gv

References

https://twitter.com/TrueSkrillor/status/1736774389725565005 URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity... URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://www.theregister.com/2023/12/20/terrapin_attack_ssh URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15 URL
https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cv... URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://lists.debian.org/debian-lts-announce/2024/09/msg00042.html URL
https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-d... URL
https://lists.debian.org/debian-lts-announce/2024/11/msg00032.html URL
https://lists.fedoraproject.org/archives/list/[email protected]... URL
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://security.netapp.com/advisory/ntap-20240105-0004/ Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://security.gentoo.org/glsa/202312-16 Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://security.gentoo.org/glsa/202312-17 Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://github.com/advisories/GHSA-45x7-px36-x8w8 Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
https://github.com/mwiede/jsch/issues/457 Third Party Advisory
https://github.com/proftpd/proftpd/issues/456 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2254210 Third Party Advisory
https://github.com/ssh-mitm/ssh-mitm/issues/165 Third Party Advisory
https://github.com/PowerShell/Win32-OpenSSH/issues/2189 Third Party Advisory
https://github.com/cyd01/KiTTY/issues/520 Third Party Advisory
https://github.com/janmojzis/tinyssh/issues/81 Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1217950 Third Party Advisory
https://github.com/hierynomus/sshj/issues/916 Third Party Advisory
https://github.com/paramiko/paramiko/issues/2337 Third Party Advisory
https://github.com/apache/mina-sshd/issues/445 Third Party Advisory
https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c1... Patch
https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df8153... Patch
https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2... Patch
https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d Patch
https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3 Patch
https://github.com/libssh2/libssh2/pull/1291 Patch
http://www.openwall.com/lists/oss-security/2023/12/19/5 Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/04/17/8 Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/12/20/3 Third Party Advisory
http://www.openwall.com/lists/oss-security/2024/03/06/3 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2023/12/msg00017.html Third Party Advisory
http://www.openwall.com/lists/oss-security/2023/12/18/3 Third Party Advisory
http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.ht... URL
https://access.redhat.com/security/cve/cve-2023-48795 URL
https://bugs.gentoo.org/920280 URL
https://cert-portal.siemens.com/productcert/html/ssa-082556.html URL
https://cert-portal.siemens.com/productcert/html/ssa-364175.html URL
https://cert-portal.siemens.com/productcert/html/ssa-769027.html URL
https://cert-portal.siemens.com/productcert/html/ssa-794697.html URL
https://cert-portal.siemens.com/productcert/html/ssa-915275.html URL
https://crates.io/crates/thrussh/versions URL
https://filezilla-project.org/versions.php URL
https://forum.netgate.com/topic/184941/terrapin-ssh-attack URL
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69... URL
https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta URL
https://github.com/TeraTermProject/teraterm/releases/tag/v5.1 URL
https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22 URL
https://github.com/drakkan/sftpgo/releases/tag/v2.5.6 URL
https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/... URL
https://github.com/erlang/otp/releases/tag/OTP-26.2.1 URL
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CH... URL
https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8... URL
https://github.com/openssh/openssh-portable/commits/master URL
https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99... URL
https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1... URL
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES URL
https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst URL
https://github.com/ronf/asyncssh/tags URL
https://github.com/warp-tech/russh/releases/tag/v0.40.2 URL
https://gitlab.com/libssh/libssh-mirror/-/tags URL
https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ URL
https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg URL
https://help.panic.com/releasenotes/transmit5/ URL
https://matt.ucc.asn.au/dropbear/CHANGES URL
https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LG... URL
https://news.ycombinator.com/item?id=38684904 URL
https://news.ycombinator.com/item?id=38685286 URL
https://news.ycombinator.com/item?id=38732005 URL
https://nova.app/releases/#v11.8 URL
https://oryx-embedded.com/download/#changelog URL
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002 URL
https://roumenpetrov.info/secsh/#news20231220 URL
https://security-tracker.debian.org/tracker/CVE-2023-48795 URL
https://security-tracker.debian.org/tracker/source-package/libssh2 URL
https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg URL
https://security-tracker.debian.org/tracker/source-package/trilead-ssh2 URL
https://support.apple.com/kb/HT214084 URL
https://thorntech.com/cve-2023-48795-and-sftp-gateway/ URL
https://ubuntu.com/security/CVE-2023-48795 URL
https://winscp.net/eng/docs/history#6.2.2 URL
https://www.bitvise.com/ssh-client-version-history#933 URL
https://www.bitvise.com/ssh-server-version-history URL
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html URL
https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update URL
https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c24... URL
https://www.netsarang.com/en/xshell-update-history/ URL
https://www.openssh.com/openbsd.html URL
https://www.openssh.com/txt/release-9.6 URL
https://www.openwall.com/lists/oss-security/2023/12/18/2 URL
https://www.openwall.com/lists/oss-security/2023/12/20/3 URL
https://www.paramiko.org/changelog.html URL
https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_... URL
https://www.terrapin-attack.com URL
https://www.vandyke.com/products/securecrt/history.txt URL
https://www.vicarius.io/vsociety/posts/cve-2023-48795-detect-openssh-vulnerabili... URL
https://www.vicarius.io/vsociety/posts/cve-2023-48795-mitigate-openssh-vulnerabi... URL
https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/48xxx/CVE-2023-48795... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-48795 Vendor Advisory
https://www.debian.org/security/2023/dsa-5586 Vendor Advisory
https://www.debian.org/security/2023/dsa-5588 Vendor Advisory
https://github.com/NixOS/nixpkgs/pull/275249 Patch
https://github.com/mwiede/jsch/pull/461 Patch
https://github.com/rapier1/hpn-ssh/releases Product
http://seclists.org/fulldisclosure/2024/Mar/21 Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00013.html Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/01/msg00014.html Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00016.html Third Party Advisory

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

5.9 Medium

Timeline

Published30 Oct 2025

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-gwcg-wcrc-j5gv · OSV

Track software like this

Free during beta