Vulnerability in N/a
CVSS Skor
6.5
EPSS İhtimal
%89.7
Risk Skoru
5.8
Yayın
3 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
This vulnerability is of the "double-free" type, which occurs during the processing of key exchange (KEX) algorithms in OpenSSH. A "double-free" vulnerability happens when memory that has already been freed is freed again. This issue can indirectly lead to remote code execution (RCE) by an attacker.
OpenSSH Pre-Auth Double Free CVE-2023-25136 – Writeup and Proof-of-Concept
Looking into the memory when sshd 9.1p1 aborts due to a double free bug.
OpenSSH 9.1 vulnerability mass scan and exploit
OpenSSH Pre-Auth Double Free CVE-2023-25136 POC
OpenSSH 9.1 vulnerability mass scan and exploit
İlgili Benzer Açıklar
Improper input validation in Apache Log4j
Improper access control in N/a
Vulnerability in N/a VMware vCenter Server And VMware Cloud Foundation
Vulnerability in N/a
Vulnerability in N/a VMware vCenter Server
Vulnerability in N/a
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-25136"