USN-6589-1: FileZilla vulnerability
Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol used in FileZilla is prone to a prefix truncation attack, known as the "Terrapin attack". A remote attacker could use this issue to downgrade or disable some security features and obtain sensitive information.
Affected Software
Frequently Asked Questions
What is the severity of USN-6589-1?
USN-6589-1 addresses a prefix truncation vulnerability in FileZilla that could allow a remote attacker to disable security features.
How do I fix USN-6589-1?
To fix USN-6589-1, update FileZilla to version 3.65.0-3ubuntu0.1 or higher on supported Ubuntu versions.
Which versions of FileZilla are affected by USN-6589-1?
FileZilla versions prior to 3.65.0-3ubuntu0.1 are affected on Ubuntu versions 23.10, 22.04, and 20.04.
Can USN-6589-1 lead to data exposure?
Yes, USN-6589-1 can potentially lead to sensitive data exposure due to disabled security features.
Is it safe to use FileZilla with USN-6589-1 vulnerability?
It is not safe to use FileZilla with the USN-6589-1 vulnerability until it has been patched with the latest update.