Asyncssh Project

Asyncssh

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.9

CVE-2023-48795

Media report Exploit
  • EPSS 64.06%
  • Published 18.12.2023 16:15:10
  • Last modified 29.09.2025 21:56:10

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client a...

5.9

CVE-2023-46445

  • EPSS 0.42%
  • Published 14.11.2023 03:15:09
  • Last modified 21.11.2024 08:28:31

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."

6.8

CVE-2023-46446

  • EPSS 0.4%
  • Published 14.11.2023 03:15:09
  • Last modified 21.11.2024 08:28:31

An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."

9.8

CVE-2018-7749

  • EPSS 0.39%
  • Published 12.03.2018 19:29:00
  • Last modified 21.11.2024 04:12:39

The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other requests. A customized SSH client can simply skip the authentication step.