OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses."
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade openssh | Mar 21, 2024 | Dec 24, 2023 |
| Debian | — | No solution exists | May 15, 2025 | Dec 24, 2023 |
| Openbsd Openssh | — | Upgrade to the latest version of OpenSSH | Mar 12, 2024 | Dec 24, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 24, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub