vulnerability
FreeBSD: VID-09b7cd39-47bd-11ee-8e38-002590c1f29c (CVE-2023-25136): FreeBSD -- OpenSSH pre-authentication double free
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:M/Au:N/C:N/I:P/A:C) | Aug 31, 2023 | Aug 31, 2023 | Dec 10, 2025 |
Severity
8
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:C)
Published
Aug 31, 2023
Added
Aug 31, 2023
Modified
Dec 10, 2025
Description
Problem Description: A flaw in the backwards-compatibility key exchange route allows a pointer to be freed twice. Impact: A remote, unauthenticated attacker may be able to cause a denial of service, or possibly remote code execution. Note that FreeBSD 12.3 and FreeBSD 13.1 include older versions of OpenSSH, and are not affected. FreeBSD 13.2-BETA1 and later include the fix.
Solution
freebsd-upgrade-base-12_4-release-p2
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.