Memory Leak Affecting openssh package, versions <0:8.7p1-29.el9_2


Severity

Recommended
0.0
medium
0
10

Based on CentOS security rating.

Threat Intelligence

EPSS
0.94% (84th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Memory Leak vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-CENTOS9-OPENSSH-3314377
  • published7 Feb 2023
  • disclosed3 Feb 2023

Introduced: 3 Feb 2023

CVE-2023-25136  (opens in a new tab)
CWE-401  (opens in a new tab)

How to fix?

Upgrade Centos:9 openssh to version 0:8.7p1-29.el9_2 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream openssh package and not the openssh package as distributed by Centos. See How to fix? for Centos:9 relevant fixed versions and status.

OpenSSH server (sshd) 9.1 introduced a double-free vulnerability during options.kex_algorithms handling. This is fixed in OpenSSH 9.2. The double free can be leveraged, by an unauthenticated remote attacker in the default configuration, to jump to any location in the sshd address space. One third-party report states "remote code execution is theoretically possible."

CVSS Scores

version 3.1