Skip to content

Terrapin attack: prefix truncation vulnerability affecting ssh implementations allowing MitM attackers to drop packets (CVE-2023-48795)

https://terrapin-attack.com/

Terrapin is a prefix truncation attack targeting the SSH protocol. More precisely, Terrapin breaks the integrity of SSH's secure channel. By carefully adjusting the sequence numbers during the handshake, an attacker can remove an arbitrary amount of messages sent by the client or server at the beginning of the secure channel without the client or server noticing it.

https://security.alpinelinux.org/vuln/CVE-2023-48795

Affacted in main/:

(checked boxes indicate the issue has been addressed)

  • openssh (commit 1, commit 2, 9.6p1)
    • edge
    • 3.19-stable
    • 3.18-stable
    • 3.17-stable
    • 3.16-stable
  • dropbear (commit)
    • edge
    • 3.19-stable
    • 3.18-stable
    • 3.17-stable
    • 3.16-stable
  • libssh2 (commit)
    • edge
    • 3.19-stable
    • 3.18-stable
    • 3.17-stable
    • 3.16-stable
  • putty 0.80
    • edge
    • 3.19-stable
    • 3.18-stable
    • 3.17-stable
    • 3.16-stable

Affected in community/:

(checked boxes indicate the issue has been addressed)

Affected in community/ using golang.org/x/crypto/ssh (issue, change, commit)

Affected using russh rust crate (commit, v0.40.2)

Edited by Natanael Copa
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information