CVE-2013-4548: Medium severity openssh vulnerability
The mmnewkeysfromblob function in monitorwrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher is used, does not properly initialize memory for a MAC context data structure, which allows remote authenticated users to bypass intended ForceCommand and login-shell restrictions via packet data that provides a crafted callback address.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4548?
CVE-2013-4548 has a Medium severity rating, allowing certain attacks to bypass command restrictions.
How do I fix CVE-2013-4548?
To address CVE-2013-4548, upgrade your OpenSSH version to 6.4 or later, where this vulnerability has been patched.
Who is affected by CVE-2013-4548?
CVE-2013-4548 affects users of OpenSSH versions 6.2 and 6.3 running in environments that utilize AES-GCM ciphers.
What types of attacks can exploit CVE-2013-4548?
CVE-2013-4548 can be exploited by remote authenticated users to bypass intended ForceCommand and login-shell restrictions.
What is the cause of CVE-2013-4548?
CVE-2013-4548 is caused by improper memory initialization for a MAC context data structure within the mm_newkeys_from_blob function.