Tuesday, February 7, 2023

OpenSSH Releases Patch for New Pre-Auth Double Free Vulnerability

The maintainers of OpenSSH have released OpenSSH 9.2 to address a number of security bugs, including a memory safety vulnerability in the OpenSSH server (sshd). Tracked as CVE-2023-25136, the shortcoming has been classified as a pre-authentication double free vulnerability that was introduced in version 9.1. "This is not believed to be exploitable, and it occurs in the unprivileged pre-auth
https://thehackernews.com/2023/02/openssh-releases-patch-for-new-pre-auth.html?utm_source=dlvr.it&utm_medium=blogger

No comments:

Post a Comment