OpenSSH (transport): Terrapin: prefix-truncation attack on the SSH Binary Packet Protocol

CVE-2023-48795Kernel, userspace & hypervisorcurated

Impact

Terrapin: prefix-truncation attack on the SSH Binary Packet Protocol - silently downgrades channel integrity

Who can reach it

Unauthenticated network (MITM position)

What to do

Package update on both ends + sshd restart; no reboot

References

https://access.redhat.com/security/cve/CVE-2023-48795

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.