7

CVE-2023-51767

EPSS 0.01%
Veröffentlicht 24.12.2023 07:15:07
Zuletzt bearbeitet 18.11.2025 22:15:43
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 37

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Openbsd ≫ Openssh

Fedoraproject ≫ Fedora Version39

Redhat ≫ Enterprise Linux Version8.0

Redhat ≫ Enterprise Linux Version9.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.01%	0.008

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7	1	5.9	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

https://arxiv.org/abs/2309.02545

Technical Description

https://access.redhat.com/security/cve/CVE-2023-51767

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2255850

Third Party Advisory

Issue Tracking

https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77

Product

https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878

Product

https://security.netapp.com/advisory/ntap-20240125-0006/

Third Party Advisory

https://ubuntu.com/security/CVE-2023-51767

Third Party Advisory

https://www.openwall.com/lists/oss-security/2025/09/22/1

http://www.openwall.com/lists/oss-security/2025/09/22/1

http://www.openwall.com/lists/oss-security/2025/09/22/2

http://www.openwall.com/lists/oss-security/2025/09/23/4

http://www.openwall.com/lists/oss-security/2025/09/24/4

http://www.openwall.com/lists/oss-security/2025/10/01/1

http://www.openwall.com/lists/oss-security/2025/10/01/2

http://www.openwall.com/lists/oss-security/2025/09/23/1

http://www.openwall.com/lists/oss-security/2025/09/23/3

http://www.openwall.com/lists/oss-security/2025/09/23/5

http://www.openwall.com/lists/oss-security/2025/09/24/7

http://www.openwall.com/lists/oss-security/2025/09/25/2

http://www.openwall.com/lists/oss-security/2025/09/25/6

http://www.openwall.com/lists/oss-security/2025/09/26/2

http://www.openwall.com/lists/oss-security/2025/09/26/4

http://www.openwall.com/lists/oss-security/2025/09/27/1

http://www.openwall.com/lists/oss-security/2025/09/27/2

http://www.openwall.com/lists/oss-security/2025/09/27/3

http://www.openwall.com/lists/oss-security/2025/09/27/5

http://www.openwall.com/lists/oss-security/2025/09/27/6

http://www.openwall.com/lists/oss-security/2025/09/27/7

http://www.openwall.com/lists/oss-security/2025/09/29/4

http://www.openwall.com/lists/oss-security/2025/09/29/5

http://www.openwall.com/lists/oss-security/2025/09/29/6

http://www.openwall.com/lists/oss-security/2025/09/27/4

http://www.openwall.com/lists/oss-security/2025/09/28/7

http://www.openwall.com/lists/oss-security/2025/09/29/1

https://nvd.nist.gov/vuln/detail/CVE-2023-51767

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-51767

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-51767

EUVD