Back to search
CVE-2013-4548
Published: Nov 8, 2013
Modified: Aug 6, 2024
PUBLISHED
Description
The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet data that provides a crafted callback address.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
http://www.openssh.com/txt/gcmrekey.adv
x_refsource_CONFIRM
[oss-security] 20131107 Re: CVE Request - OpenSSH
mailing-list
x_refsource_MLIST
HPSBUX03188
vendor-advisory
x_refsource_HP
SSRT101487
vendor-advisory
x_refsource_HP
openSUSE-SU-2013:1726
vendor-advisory
x_refsource_SUSE
USN-2014-1
vendor-advisory
x_refsource_UBUNTU
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now