Lucene search

K
rosalinuxROSA LABROSA-SA-2023-2127
HistoryFeb 28, 2023 - 10:34 a.m.

Advisory ROSA-SA-2023-2127

2023-02-2810:34:46
ROSA LAB
abf.rosalinux.ru
63

0.011 Low

EPSS

Percentile

84.4%

Software: openssh 7.4
OS: rosa-server79

package_evr_string: openssh-7.4p1-21

CVE-ID: CVE-2023-25136
BDU-ID: 2023-00711
CVE-Crit: CRITICAL
CVE-DESC: A vulnerability in the options.kex_algorithms component of the OpenSSH cryptographic security tool server is associated with a memory re-release error. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code
CVE-STATUS: N/A
CVE-REV: N/A

OSVersionArchitecturePackageVersionFilename
rosaanynoarchopenssh< 7.4UNKNOWN