CVE-2023-51767 HIGH

OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses."

Additional Descriptions (1)

OpenSSH hasta 9.6, cuando se utilizan tipos comunes de DRAM, podría permitir row hammer attacks (para omitir la autenticación) porque el valor entero de autenticado en mm_answer_authpassword no resiste cambios de un solo bit. NOTA: esto es aplicable a un determinado modelo de amenaza de ubicación conjunta entre atacante y víctima en el que el atacante tiene privilegios de usuario.

Source	Type	Description
[email protected]	Primary	en NVD-CWE-Other

• https://access.redhat.com/security/cve/CVE-2023-51767
  Source: [email protected]
  Third Party Advisory
• https://arxiv.org/abs/2309.02545
  Source: [email protected]
  Technical Description
• https://bugzilla.redhat.com/show_bug.cgi?id=2255850
  Source: [email protected]
  Issue Tracking Third Party Advisory
• https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77
  Source: [email protected]
  Product
• https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878
  Source: [email protected]
  Product
• https://security.netapp.com/advisory/ntap-20240125-0006/
  Source: [email protected]
  Third Party Advisory
• https://ubuntu.com/security/CVE-2023-51767
  Source: [email protected]
  Third Party Advisory
• https://www.openwall.com/lists/oss-security/2025/09/22/1
  Source: [email protected]
• http://www.openwall.com/lists/oss-security/2025/09/22/1
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/22/2
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/23/1
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/23/3
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/23/4
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/23/5
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/24/4
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/24/7
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/25/2
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/25/6
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/26/2
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/26/4
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/27/1
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/27/2
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/27/3
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/27/4
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/27/5
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/27/6
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/27/7
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/28/7
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/29/1
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/29/4
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/29/5
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/09/29/6
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/10/01/1
  Source: af854a3a-2127-422b-91ae-364da2661108
• http://www.openwall.com/lists/oss-security/2025/10/01/2
  Source: af854a3a-2127-422b-91ae-364da2661108
• https://access.redhat.com/security/cve/CVE-2023-51767
  Source: af854a3a-2127-422b-91ae-364da2661108
  Third Party Advisory
• https://arxiv.org/abs/2309.02545
  Source: af854a3a-2127-422b-91ae-364da2661108
  Technical Description
• https://bugzilla.redhat.com/show_bug.cgi?id=2255850
  Source: af854a3a-2127-422b-91ae-364da2661108
  Issue Tracking Third Party Advisory
• https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/auth-passwd.c#L77
  Source: af854a3a-2127-422b-91ae-364da2661108
  Product
• https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d88b1a6076fb9f97e4a99/monitor.c#L878
  Source: af854a3a-2127-422b-91ae-364da2661108
  Product
• https://security.netapp.com/advisory/ntap-20240125-0006/
  Source: af854a3a-2127-422b-91ae-364da2661108
  Third Party Advisory
• https://ubuntu.com/security/CVE-2023-51767
  Source: af854a3a-2127-422b-91ae-364da2661108
  Third Party Advisory