CVE-2013-4548

Published: Nov 8, 2013Modified: Apr 29, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet data that provides a crafted callback address.

Affected (2)

Products: Openbsd: Openssh

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Openbsd Openssh	Version 6.2
Openbsd Openssh	Version 6.3

Related CWEs

References (10)

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00017.html

Source: secalert@redhat.com

http://marc.info/?l=bugtraq&m=141576985122836&w=2

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2013/11/08/3

Source: secalert@redhat.com

http://www.openssh.com/txt/gcmrekey.adv

Source: secalert@redhat.com

Vendor Advisory

http://www.ubuntu.com/usn/USN-2014-1

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00017.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://marc.info/?l=bugtraq&m=141576985122836&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2013/11/08/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openssh.com/txt/gcmrekey.adv

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.ubuntu.com/usn/USN-2014-1

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.