Summary
Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH
did not properly handle the extension info message. An attacker able to
intercept communications could possibly use this issue to downgrade
the algorithm used for client authentication. (CVE-2023-46445)
Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH
did not properly handle the user authentication request message. An
attacker could possibly use this issue to control the remote end of an SSH
client session via packet injection/removal and shell emulation.
(CVE-2023-46446)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | python-asyncssh | 1.12.2-1ubuntu0.2 |
| Ubuntu · 22.04 LTS 22.04:LTS | python-asyncssh | 2.5.0-1ubuntu0.1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | python-asyncssh | 2.10.1-2ubuntu0.1+esm1 |
Vulnerabilities 2
-
Medium 6.8
AsyncSSH Rogue Session Attack
An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation, aka a "Rogue Session Attack."
-
Medium 5.9
AsyncSSH Rogue Extension Negotiation
An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."