CVE-2023-25136 - OpenSSH server

[KAPLA]

Please login or register to view this content

[theguilty]

thanks man

[Kevin300]

Thanks man

[M3AYZO]

Thanks good one

[ZelC10000]

This is just reply to view hidden content

edit: just a explain about vuln in openssh 9.1 you can just search `openssh 9.1 vuln` in google and it show the same result as hidden content

[csicua]

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be triggered by an unauthenticated attacker in the default configuration. One third-party report states "remote code execution is theoretically possible."

References