Home > Vulnerability Database > CVE-2023-25136

Mend.io Vulnerability Database

CVE-2023-25136

Date: February 2, 2023

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible." Converted from WS-2023-0026, on 2023-02-03.

Language: C

Severity Score

6.5

Related Resources (21)

Url: https://news.ycombinator.com/item?id=34711565

Url: https://security.netapp.com/advisory/ntap-20230309-0003/

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JGAUIXJ3TEKCRKVWFQ6GDAGQFTIIGQQP/

Url: http://www.openwall.com/lists/oss-security/2023/03/06/1

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R7LKQDFZWKYHQ65TBSH2X2HJQ4V2THS3/

Url: https://jfrog.com/blog/openssh-pre-auth-double-free-cve-2023-25136-writeup-and-proof-of-concept/

Url: https://ftp.openbsd.org/pub/OpenBSD/patches/7.2/common/017_sshd.patch.sig

Url: https://security-tracker.debian.org/tracker/CVE-2023-25136

Url: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/R7LKQDFZWKYHQ65TBSH2X2HJQ4V2THS3/

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JGAUIXJ3TEKCRKVWFQ6GDAGQFTIIGQQP/

Url: http://www.openwall.com/lists/oss-security/2023/02/22/1

Url: https://github.com/openssh/openssh-portable/commit/486c4dc3b83b4b67d663fb0fa62bc24138ec3946

Url: https://bugzilla.mindrot.org/show_bug.cgi?id=3522

Url: https://nvd.nist.gov/vuln/detail/CVE-2023-25136

Url: https://security.gentoo.org/glsa/202307-01

Url: http://www.openwall.com/lists/oss-security/2023/03/09/2

Url: http://www.openwall.com/lists/oss-security/2023/02/23/3

Url: https://www.openwall.com/lists/oss-security/2023/02/02/2

Url: http://www.openwall.com/lists/oss-security/2023/02/22/2

Url: http://www.openwall.com/lists/oss-security/2023/02/13/1

Url: https://www.mend.io/vulnerability-database/CVE-2023-25136

Severity Score

6.5

Weakness Type (CWE)

Double Free

CWE-415

CVSS v3.1

Base Score:	6.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	HIGH

Mend.io Vulnerability Database

We found results for “”

CVE-2023-25136

Date: February 2, 2023

Language: C

Severity Score

Related Resources (21)

Severity Score

Weakness Type (CWE)

CVSS v3.1

Do you need more information?