7

CVE-2023-51767

Medienbericht
OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fedoraproject ≫ Fedora Version 39
Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Enterprise Linux Version 9.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.66% 0.467
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA-ADP 7 1 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
12.09.2026 09:05
https://arxiv.org/abs/2309.02545
Technical Description
https://access.redhat.com/security/cve/CVE-2023-51767
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2255850
Third Party Advisory
Issue Tracking
https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77
Product
https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878
Product
https://security.netapp.com/advisory/ntap-20240125-0006/
Third Party Advisory
https://ubuntu.com/security/CVE-2023-51767
Third Party Advisory
https://www.openwall.com/lists/oss-security/2025/09/22/1
http://www.openwall.com/lists/oss-security/2025/09/22/1
http://www.openwall.com/lists/oss-security/2025/09/22/2
http://www.openwall.com/lists/oss-security/2025/09/23/4
http://www.openwall.com/lists/oss-security/2025/09/24/4
http://www.openwall.com/lists/oss-security/2025/10/01/1
http://www.openwall.com/lists/oss-security/2025/10/01/2
http://www.openwall.com/lists/oss-security/2025/09/23/1
http://www.openwall.com/lists/oss-security/2025/09/23/3
http://www.openwall.com/lists/oss-security/2025/09/23/5
http://www.openwall.com/lists/oss-security/2025/09/24/7
http://www.openwall.com/lists/oss-security/2025/09/25/2
http://www.openwall.com/lists/oss-security/2025/09/25/6
http://www.openwall.com/lists/oss-security/2025/09/26/2
http://www.openwall.com/lists/oss-security/2025/09/26/4
http://www.openwall.com/lists/oss-security/2025/09/27/1
http://www.openwall.com/lists/oss-security/2025/09/27/2
http://www.openwall.com/lists/oss-security/2025/09/27/3
http://www.openwall.com/lists/oss-security/2025/09/27/5
http://www.openwall.com/lists/oss-security/2025/09/27/6
http://www.openwall.com/lists/oss-security/2025/09/27/7
http://www.openwall.com/lists/oss-security/2025/09/29/4
http://www.openwall.com/lists/oss-security/2025/09/29/5
http://www.openwall.com/lists/oss-security/2025/09/29/6
http://www.openwall.com/lists/oss-security/2025/09/27/4
http://www.openwall.com/lists/oss-security/2025/09/28/7
http://www.openwall.com/lists/oss-security/2025/09/29/1