Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
CORE SDI SSH1 CRC-32 compensation attack detector allows remote attackers to execute arbitrary commands on an SSH server or client via an integer overflow.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
13 versions affected across 2 products
Ja też mam scyzoryk. Nawet kilka. W różnych kolorach. Victorinox. Posiadam także nóż do masła. A także do chleba. No i śrubokręt. Noże używałem dzisiaj rano. Mam też groźną cyberbroń. Exploita na OpenSSH 2.2.0. CVE-2001-0144. Rocznik 2001. Tego akurat dzisiaj nie używałem.
@JulesMandoX @levelsio I guess I've never taken that threat seriously. The most recent distro SSH RCE seen in the wild was CVE-2001-0144 and there's been a lotta security hardening over the last 25 years since. I'd say you're equally likely to get screwed by wireguard and more likely tailscaled not ssh
Post summary
A casual remark that references an old CVE but provides no actionable or technical details.
13 of 13 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | openbsd | openssh | 1.2.2 | - | - |
| App | openbsd | openssh | 1.2.3 | - | - |
| App | openbsd | openssh | 2.1 | - | - |
| App | openbsd | openssh | 2.1.1 | - | - |
| App | openbsd | openssh | 2.2 | - | - |
| App | ssh | ssh | 1.2.24 | - | - |
| App | ssh | ssh | 1.2.25 | - | - |
| App | ssh | ssh | 1.2.26 | - | - |
| App | ssh | ssh | 1.2.27 | - | - |
| App | ssh | ssh | 1.2.28 | - | - |
| App | ssh | ssh | 1.2.29 | - | - |
| App | ssh | ssh | 1.2.30 | - | - |
| App | ssh | ssh | 1.2.31 | - | - |