USN-7108-2

Advisory lineage Upstream: 4 Downstream: 0
Published: 12 Dec 2024, 06:58
Last modified:27 Apr 2026, 17:35

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

12 Dec 2024, 06:58
Published
Vulnerability first disclosed
27 Apr 2026, 17:35
Last Modified
Vulnerability information updated

Description

python-asyncssh vulnerabilities USN-7108-1 fixed vulnerabilities in AysncSSH. This update provides the corresponding update for Ubuntu 18.04 LTS. Original advisory details: Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH did not properly handle the extension info message. An attacker able to intercept communications could possibly use this issue to downgrade the algorithm used for client authentication. (CVE-2023-46445) Fabian Bäumer, Marcus Brinkmann, and Jörg Schwenk discovered that AsyncSSH did not properly handle the user authentication request message. An attacker could possibly use this issue to control the remote end of an SSH client session via packet injection/removal and shell emulation. (CVE-2023-46446)

Affected Systems

  • ubuntu•python-asyncssh

    < 1.11.1-1ubuntu0.1~esm2

References (3)