{"schema_version":"1.7.5","id":"UBUNTU-CVE-2023-48795","published":"2023-12-18T15:00:00Z","modified":"2026-07-09T12:46:42.085184660Z","related":["USN-6560-1","USN-6560-2","USN-6561-1","USN-6585-1","USN-6589-1","USN-6598-1","USN-6738-1","USN-7051-1","USN-7292-1","USN-7297-1"],"upstream":["CVE-2023-48795"],"details":"The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.","affected":[{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:14.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=esm-infra-legacy%2Ftrusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:6.2p2-6","1:6.2p2-6ubuntu1","1:6.4p1-1","1:6.4p1-2","1:6.5p1-1","1:6.5p1-2","1:6.5p1-3","1:6.5p1-4","1:6.5p1-6","1:6.6p1-1","1:6.6p1-2","1:6.6p1-2ubuntu1","1:6.6p1-2ubuntu2","1:6.6p1-2ubuntu2.2","1:6.6p1-2ubuntu2.3","1:6.6p1-2ubuntu2.4","1:6.6p1-2ubuntu2.6","1:6.6p1-2ubuntu2.7","1:6.6p1-2ubuntu2.8","1:6.6p1-2ubuntu2.10","1:6.6p1-2ubuntu2.11","1:6.6p1-2ubuntu2.12","1:6.6p1-2ubuntu2.13","1:6.6p1-2ubuntu2.13+esm1","1:6.6p1-2ubuntu2.13+esm2"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client","binary_version":"1:6.6p1-2ubuntu2.13+esm2"},{"binary_name":"openssh-server","binary_version":"1:6.6p1-2ubuntu2.13+esm2"},{"binary_name":"openssh-sftp-server","binary_version":"1:6.6p1-2ubuntu2.13+esm2"},{"binary_name":"ssh","binary_version":"1:6.6p1-2ubuntu2.13+esm2"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:6.6p1-2ubuntu2.13+esm2"},{"binary_name":"ssh-krb5","binary_version":"1:6.6p1-2ubuntu2.13+esm2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"paramiko","ecosystem":"Ubuntu:14.04:LTS","purl":"pkg:deb/ubuntu/paramiko?arch=source&distro=trusty"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.10.1-1","1.10.1-1git1","1.10.1-1git1build1","1.10.1-1git1ubuntu0.1","1.10.1-1git1ubuntu0.2"],"ecosystem_specific":{"binaries":[{"binary_name":"python-paramiko","binary_version":"1.10.1-1git1ubuntu0.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"lxd","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/lxd?arch=source&distro=esm-infra%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.11-0ubuntu1~16.04.4+esm1"}]}],"versions":["0.20-0ubuntu4","0.21-0ubuntu3","0.21-0ubuntu5","0.22-0ubuntu1","0.22-0ubuntu2","0.23-0ubuntu1","0.23-0ubuntu2","0.23-0ubuntu3","0.24-0ubuntu2","0.24-0ubuntu3","0.24-0ubuntu4","0.25-0ubuntu1","0.26-0ubuntu2","0.26-0ubuntu3","0.27-0ubuntu1","0.27-0ubuntu2","2.0.0~beta1-0ubuntu3","2.0.0~beta1-0ubuntu4","2.0.0~beta2-0ubuntu1","2.0.0~beta2-0ubuntu2","2.0.0~beta3-0ubuntu1","2.0.0~beta3-0ubuntu2","2.0.0~beta3-0ubuntu3","2.0.0~beta3-0ubuntu4","2.0.0~beta4-0ubuntu1","2.0.0~beta4-0ubuntu2","2.0.0~beta4-0ubuntu3","2.0.0~beta4-0ubuntu4","2.0.0~beta4-0ubuntu5","2.0.0~beta4-0ubuntu6","2.0.0~beta4-0ubuntu7","2.0.0~rc1-0ubuntu1","2.0.0~rc1-0ubuntu2","2.0.0~rc1-0ubuntu3","2.0.0~rc2-0ubuntu2","2.0.0~rc2-0ubuntu3","2.0.0~rc3-0ubuntu1","2.0.0~rc3-0ubuntu2","2.0.0~rc3-0ubuntu3","2.0.0~rc3-0ubuntu4","2.0.0~rc4-0ubuntu1","2.0.0~rc5-0ubuntu1","2.0.0~rc6-0ubuntu1","2.0.0~rc6-0ubuntu2","2.0.0~rc7-0ubuntu1","2.0.0~rc7-0ubuntu2","2.0.0~rc8-0ubuntu1","2.0.0~rc8-0ubuntu2","2.0.0~rc8-0ubuntu3","2.0.0~rc8-0ubuntu5","2.0.0~rc8-0ubuntu6","2.0.0~rc8-0ubuntu7","2.0.0~rc9-0ubuntu2","2.0.0~rc9-0ubuntu3","2.0.0~rc9-0ubuntu4","2.0.0~rc9-0ubuntu5","2.0.0-0ubuntu1","2.0.0-0ubuntu2","2.0.0-0ubuntu3","2.0.0-0ubuntu4","2.0.1-0ubuntu1~16.04.1","2.0.2-0ubuntu1~16.04.1","2.0.3-0ubuntu1~ubuntu16.04.2","2.0.4-0ubuntu1~ubuntu16.04.1","2.0.5-0ubuntu1~ubuntu16.04.1","2.0.8-0ubuntu1~ubuntu16.04.1","2.0.8-0ubuntu1~ubuntu16.04.2","2.0.9-0ubuntu1~16.04.1","2.0.9-0ubuntu1~16.04.2","2.0.10-0ubuntu1~16.04.1","2.0.10-0ubuntu1~16.04.2","2.0.11-0ubuntu1~16.04.2","2.0.11-0ubuntu1~16.04.4"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"golang-github-lxc-lxd-dev","binary_version":"2.0.11-0ubuntu1~16.04.4+esm1"},{"binary_name":"lxc2","binary_version":"2.0.11-0ubuntu1~16.04.4+esm1"},{"binary_name":"lxd","binary_version":"2.0.11-0ubuntu1~16.04.4+esm1"},{"binary_name":"lxd-client","binary_version":"2.0.11-0ubuntu1~16.04.4+esm1"},{"binary_name":"lxd-tools","binary_version":"2.0.11-0ubuntu1~16.04.4+esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=esm-infra%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-4ubuntu2.10+esm5"}]}],"versions":["1:6.9p1-2","1:6.9p1-3","1:7.1p1-1","1:7.1p1-3","1:7.1p1-4","1:7.1p1-6","1:7.1p2-1","1:7.1p2-2","1:7.2p1-1","1:7.2p2-1","1:7.2p2-2","1:7.2p2-3","1:7.2p2-4","1:7.2p2-4ubuntu1","1:7.2p2-4ubuntu2.1","1:7.2p2-4ubuntu2.2","1:7.2p2-4ubuntu2.4","1:7.2p2-4ubuntu2.5","1:7.2p2-4ubuntu2.6","1:7.2p2-4ubuntu2.7","1:7.2p2-4ubuntu2.8","1:7.2p2-4ubuntu2.10","1:7.2p2-4ubuntu2.10+esm1","1:7.2p2-4ubuntu2.10+esm2","1:7.2p2-4ubuntu2.10+esm3","1:7.2p2-4ubuntu2.10+esm4"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"openssh-client","binary_version":"1:7.2p2-4ubuntu2.10+esm5"},{"binary_name":"openssh-client-ssh1","binary_version":"1:7.2p2-4ubuntu2.10+esm5"},{"binary_name":"openssh-server","binary_version":"1:7.2p2-4ubuntu2.10+esm5"},{"binary_name":"openssh-sftp-server","binary_version":"1:7.2p2-4ubuntu2.10+esm5"},{"binary_name":"ssh","binary_version":"1:7.2p2-4ubuntu2.10+esm5"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:7.2p2-4ubuntu2.10+esm5"},{"binary_name":"ssh-krb5","binary_version":"1:7.2p2-4ubuntu2.10+esm5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"golang-go.crypto","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/golang-go.crypto?arch=source&distro=esm-infra-legacy%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.0~git20150608-1","1:0.0~git20151201.0.7b85b09-2","1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm1","1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm2","1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3"],"ecosystem_specific":{"binaries":[{"binary_name":"golang-go.crypto-dev","binary_version":"1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3"},{"binary_name":"golang-golang-x-crypto-dev","binary_version":"1:0.0~git20151201.0.7b85b09-2ubuntu0.1~esm3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"paramiko","ecosystem":"Ubuntu:Pro:16.04:LTS","purl":"pkg:deb/ubuntu/paramiko?arch=source&distro=esm-infra%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.15.2-1","1.15.3-1","1.15.3-1ubuntu1","1.16.0-1","1.16.0-1ubuntu0.1","1.16.0-1ubuntu0.2","1.16.0-1ubuntu0.2+esm2"],"ecosystem_specific":{"binaries":[{"binary_name":"python-paramiko","binary_version":"1.16.0-1ubuntu0.2+esm2"},{"binary_name":"python3-paramiko","binary_version":"1.16.0-1ubuntu0.2+esm2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"dropbear","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/dropbear?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2014.65-1ubuntu2","2015.68-1","2015.70-1","2015.71-1","2016.72-1"],"ecosystem_specific":{"binaries":[{"binary_name":"dropbear","binary_version":"2016.72-1"},{"binary_name":"dropbear-bin","binary_version":"2016.72-1"},{"binary_name":"dropbear-initramfs","binary_version":"2016.72-1"},{"binary_name":"dropbear-run","binary_version":"2016.72-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"proftpd-dfsg","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/proftpd-dfsg?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.5-2","1.3.5a-1","1.3.5a-1build1","1.3.5a-1ubuntu0.1"],"ecosystem_specific":{"binaries":[{"binary_name":"proftpd-basic","binary_version":"1.3.5a-1ubuntu0.1"},{"binary_name":"proftpd-mod-geoip","binary_version":"1.3.5a-1ubuntu0.1"},{"binary_name":"proftpd-mod-ldap","binary_version":"1.3.5a-1ubuntu0.1"},{"binary_name":"proftpd-mod-mysql","binary_version":"1.3.5a-1ubuntu0.1"},{"binary_name":"proftpd-mod-odbc","binary_version":"1.3.5a-1ubuntu0.1"},{"binary_name":"proftpd-mod-pgsql","binary_version":"1.3.5a-1ubuntu0.1"},{"binary_name":"proftpd-mod-sqlite","binary_version":"1.3.5a-1ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"putty","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/putty?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.65-2","0.66-1","0.66-2","0.66-3","0.66-4","0.67-1","0.67-2","0.67-3build0.16.04.1","0.67-3+deb9u1build0.16.04.1"],"ecosystem_specific":{"binaries":[{"binary_name":"pterm","binary_version":"0.67-3+deb9u1build0.16.04.1"},{"binary_name":"putty","binary_version":"0.67-3+deb9u1build0.16.04.1"},{"binary_name":"putty-tools","binary_version":"0.67-3+deb9u1build0.16.04.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"python-asyncssh","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/python-asyncssh?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.0-1","1.2.1-1","1.3.0-1"],"ecosystem_specific":{"binaries":[{"binary_name":"python3-asyncssh","binary_version":"1.3.0-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=fips-updates%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.2p2-4ubuntu2.fips.2.10.5"}]}],"versions":["1:7.2p2-4ubuntu2.fips.2.2.3","1:7.2p2-4ubuntu2.fips.2.4.1","1:7.2p2-4ubuntu2.fips.2.4.2","1:7.2p2-4ubuntu2.fips.2.8.1","1:7.2p2-4ubuntu2.fips.2.10.1","1:7.2p2-4ubuntu2.fips.2.10.2","1:7.2p2-4ubuntu2.fips.2.10.3","1:7.2p2-4ubuntu2.fips.2.10.4"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"openssh-client","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"},{"binary_name":"openssh-client-hmac","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"},{"binary_name":"openssh-client-ssh1","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"},{"binary_name":"openssh-server","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"},{"binary_name":"openssh-server-hmac","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"},{"binary_name":"openssh-sftp-server","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"},{"binary_name":"ssh","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"},{"binary_name":"ssh-krb5","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:FIPS:16.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=fips%2Fxenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.2p2-4ubuntu2.fips.2.2","1:7.2p2-4ubuntu2.fips.2.2.1","1:7.2p2-4ubuntu2.fips.2.10.1"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"},{"binary_name":"openssh-client-hmac","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"},{"binary_name":"openssh-client-ssh1","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"},{"binary_name":"openssh-server","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"},{"binary_name":"openssh-server-hmac","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"},{"binary_name":"openssh-sftp-server","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"},{"binary_name":"ssh","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"},{"binary_name":"ssh-krb5","binary_version":"1:7.2p2-4ubuntu2.fips.2.10.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"lxd","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/lxd?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.3-0ubuntu1~18.04.2+esm1"}]}],"versions":["2.18-0ubuntu6","2.19-0ubuntu1","2.20-0ubuntu3","2.20-0ubuntu4","2.21-0ubuntu1","2.21-0ubuntu2","2.21-0ubuntu3","2.21-0ubuntu4","3.0.0~beta2-0ubuntu3","3.0.0~beta3-0ubuntu3","3.0.0~beta5-0ubuntu2","3.0.0~beta7-0ubuntu1","3.0.0-0ubuntu1","3.0.0-0ubuntu2","3.0.0-0ubuntu3","3.0.0-0ubuntu4","3.0.1-0ubuntu1~18.04.1","3.0.2-0ubuntu1~18.04.1","3.0.3-0ubuntu1~18.04.1","3.0.3-0ubuntu1~18.04.2"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"lxd","binary_version":"3.0.3-0ubuntu1~18.04.2+esm1"},{"binary_name":"lxd-client","binary_version":"3.0.3-0ubuntu1~18.04.2+esm1"},{"binary_name":"lxd-tools","binary_version":"3.0.3-0ubuntu1~18.04.2+esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=esm-infra%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.6p1-4ubuntu0.7+esm3"}]}],"versions":["1:7.5p1-10","1:7.6p1-4","1:7.6p1-4ubuntu0.1","1:7.6p1-4ubuntu0.2","1:7.6p1-4ubuntu0.3","1:7.6p1-4ubuntu0.5","1:7.6p1-4ubuntu0.6","1:7.6p1-4ubuntu0.7","1:7.6p1-4ubuntu0.7+esm1","1:7.6p1-4ubuntu0.7+esm2"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro","binaries":[{"binary_name":"openssh-client","binary_version":"1:7.6p1-4ubuntu0.7+esm3"},{"binary_name":"openssh-server","binary_version":"1:7.6p1-4ubuntu0.7+esm3"},{"binary_name":"openssh-sftp-server","binary_version":"1:7.6p1-4ubuntu0.7+esm3"},{"binary_name":"ssh","binary_version":"1:7.6p1-4ubuntu0.7+esm3"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:7.6p1-4ubuntu0.7+esm3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"paramiko","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/paramiko?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.0-1","2.0.0-1ubuntu1","2.0.0-1ubuntu1.1","2.0.0-1ubuntu1.2","2.0.0-1ubuntu1.3"],"ecosystem_specific":{"binaries":[{"binary_name":"python-paramiko","binary_version":"2.0.0-1ubuntu1.3"},{"binary_name":"python3-paramiko","binary_version":"2.0.0-1ubuntu1.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"dropbear","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/dropbear?arch=source&distro=esm-apps%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.75-3ubuntu0.1~esm1"}]}],"versions":["2017.75-2","2017.75-3build1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"dropbear","binary_version":"2017.75-3ubuntu0.1~esm1"},{"binary_name":"dropbear-bin","binary_version":"2017.75-3ubuntu0.1~esm1"},{"binary_name":"dropbear-initramfs","binary_version":"2017.75-3ubuntu0.1~esm1"},{"binary_name":"dropbear-run","binary_version":"2017.75-3ubuntu0.1~esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"golang-go.crypto","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/golang-go.crypto?arch=source&distro=esm-apps%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.0~git20170629.0.5ef0053-1ubuntu1","1:0.0~git20170629.0.5ef0053-1ubuntu2","1:0.0~git20170629.0.5ef0053-2","1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm1","1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm2","1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3"],"ecosystem_specific":{"binaries":[{"binary_name":"golang-go.crypto-dev","binary_version":"1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3"},{"binary_name":"golang-golang-x-crypto-dev","binary_version":"1:0.0~git20170629.0.5ef0053-2ubuntu0.1~esm3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh-ssh1","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/openssh-ssh1?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-8","1:7.5p1-9","1:7.5p1-9build1","1:7.5p1-10"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client-ssh1","binary_version":"1:7.5p1-10"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"proftpd-dfsg","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/proftpd-dfsg?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.5d-1","1.3.5e-1build1"],"ecosystem_specific":{"binaries":[{"binary_name":"proftpd-basic","binary_version":"1.3.5e-1build1"},{"binary_name":"proftpd-mod-geoip","binary_version":"1.3.5e-1build1"},{"binary_name":"proftpd-mod-ldap","binary_version":"1.3.5e-1build1"},{"binary_name":"proftpd-mod-mysql","binary_version":"1.3.5e-1build1"},{"binary_name":"proftpd-mod-odbc","binary_version":"1.3.5e-1build1"},{"binary_name":"proftpd-mod-pgsql","binary_version":"1.3.5e-1build1"},{"binary_name":"proftpd-mod-sqlite","binary_version":"1.3.5e-1build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"putty","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/putty?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.70-1","0.70-2","0.70-3","0.70-4"],"ecosystem_specific":{"binaries":[{"binary_name":"pterm","binary_version":"0.70-4"},{"binary_name":"putty","binary_version":"0.70-4"},{"binary_name":"putty-tools","binary_version":"0.70-4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"python-asyncssh","ecosystem":"Ubuntu:Pro:18.04:LTS","purl":"pkg:deb/ubuntu/python-asyncssh?arch=source&distro=esm-apps%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.8.1-2","1.11.0-2","1.11.1-1","1.11.1-1ubuntu0.1~esm1","1.11.1-1ubuntu0.1~esm2"],"ecosystem_specific":{"binaries":[{"binary_name":"python3-asyncssh","binary_version":"1.11.1-1ubuntu0.1~esm2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:FIPS-updates:18.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=fips-updates%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:7.9p1-10~ubuntu18.04.fips.0.9"}]}],"versions":["1:7.9p1-10~ubuntu18.04.fips.0.1","1:7.9p1-10~ubuntu18.04.fips.0.2","1:7.9p1-10~ubuntu18.04.fips.0.3","1:7.9p1-10~ubuntu18.04.fips.0.4","1:7.9p1-10~ubuntu18.04.fips.0.5","1:7.9p1-10~ubuntu18.04.fips.0.6","1:7.9p1-10~ubuntu18.04.fips.0.7","1:7.9p1-10~ubuntu18.04.fips.0.8"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"openssh-client","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.9"},{"binary_name":"openssh-client-hmac","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.9"},{"binary_name":"openssh-server","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.9"},{"binary_name":"openssh-server-hmac","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.9"},{"binary_name":"openssh-sftp-server","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.9"},{"binary_name":"openssh-tests","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.9"},{"binary_name":"ssh","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.9"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.9"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:FIPS:18.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=fips%2Fbionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.9p1-10~ubuntu18.04.fips.0.1","1:7.9p1-10~ubuntu18.04.fips.0.2"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.2"},{"binary_name":"openssh-client-hmac","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.2"},{"binary_name":"openssh-server","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.2"},{"binary_name":"openssh-server-hmac","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.2"},{"binary_name":"openssh-sftp-server","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.2"},{"binary_name":"openssh-tests","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.2"},{"binary_name":"ssh","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.2"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:7.9p1-10~ubuntu18.04.fips.0.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"filezilla","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/filezilla?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.46.3-1ubuntu0.1"}]}],"versions":["3.39.0-2","3.45.1-3","3.45.1-3build1","3.46.3-1~build1","3.46.3-1","3.46.3-1build1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"filezilla","binary_version":"3.46.3-1ubuntu0.1"},{"binary_name":"filezilla-common","binary_version":"3.46.3-1ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"libssh","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/libssh?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.3-2ubuntu2.4"}]}],"versions":["0.9.0-1ubuntu1","0.9.0-1ubuntu4","0.9.0-1ubuntu5","0.9.3-2ubuntu1","0.9.3-2ubuntu2","0.9.3-2ubuntu2.1","0.9.3-2ubuntu2.2","0.9.3-2ubuntu2.3"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libssh-4","binary_version":"0.9.3-2ubuntu2.4"},{"binary_name":"libssh-gcrypt-4","binary_version":"0.9.3-2ubuntu2.4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.2p1-4ubuntu0.10"}]}],"versions":["1:8.0p1-6build1","1:8.1p1-1","1:8.1p1-5","1:8.2p1-4","1:8.2p1-4ubuntu0.1","1:8.2p1-4ubuntu0.2","1:8.2p1-4ubuntu0.3","1:8.2p1-4ubuntu0.4","1:8.2p1-4ubuntu0.5","1:8.2p1-4ubuntu0.7","1:8.2p1-4ubuntu0.8","1:8.2p1-4ubuntu0.9"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"openssh-client","binary_version":"1:8.2p1-4ubuntu0.10"},{"binary_name":"openssh-server","binary_version":"1:8.2p1-4ubuntu0.10"},{"binary_name":"openssh-sftp-server","binary_version":"1:8.2p1-4ubuntu0.10"},{"binary_name":"openssh-tests","binary_version":"1:8.2p1-4ubuntu0.10"},{"binary_name":"ssh","binary_version":"1:8.2p1-4ubuntu0.10"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:8.2p1-4ubuntu0.10"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"paramiko","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/paramiko?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-2ubuntu0.3"}]}],"versions":["2.6.0-1","2.6.0-2","2.6.0-2ubuntu0.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"python3-paramiko","binary_version":"2.6.0-2ubuntu0.3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"proftpd-dfsg","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/proftpd-dfsg?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.6c-2ubuntu0.1"}]}],"versions":["1.3.6-6build2","1.3.6c-1","1.3.6c-2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"proftpd-basic","binary_version":"1.3.6c-2ubuntu0.1"},{"binary_name":"proftpd-mod-geoip","binary_version":"1.3.6c-2ubuntu0.1"},{"binary_name":"proftpd-mod-ldap","binary_version":"1.3.6c-2ubuntu0.1"},{"binary_name":"proftpd-mod-mysql","binary_version":"1.3.6c-2ubuntu0.1"},{"binary_name":"proftpd-mod-odbc","binary_version":"1.3.6c-2ubuntu0.1"},{"binary_name":"proftpd-mod-pgsql","binary_version":"1.3.6c-2ubuntu0.1"},{"binary_name":"proftpd-mod-snmp","binary_version":"1.3.6c-2ubuntu0.1"},{"binary_name":"proftpd-mod-sqlite","binary_version":"1.3.6c-2ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"python-asyncssh","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/python-asyncssh?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.12.2-1ubuntu0.1"}]}],"versions":["1.12.2-1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"python3-asyncssh","binary_version":"1.12.2-1ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"dropbear","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/dropbear?arch=source&distro=esm-apps%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2019.78-2ubuntu0.1~esm1"}]}],"versions":["2019.78-2build1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"dropbear","binary_version":"2019.78-2ubuntu0.1~esm1"},{"binary_name":"dropbear-bin","binary_version":"2019.78-2ubuntu0.1~esm1"},{"binary_name":"dropbear-initramfs","binary_version":"2019.78-2ubuntu0.1~esm1"},{"binary_name":"dropbear-run","binary_version":"2019.78-2ubuntu0.1~esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"golang-go.crypto","ecosystem":"Ubuntu:Pro:20.04:LTS","purl":"pkg:deb/ubuntu/golang-go.crypto?arch=source&distro=esm-apps%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.0~git20190701.4def268-2","1:0.0~git20200221.2aa609c-1","1:0.0~git20200221.2aa609c-1ubuntu0.1~esm1","1:0.0~git20200221.2aa609c-1ubuntu0.1~esm2","1:0.0~git20200221.2aa609c-1ubuntu0.1~esm3"],"ecosystem_specific":{"binaries":[{"binary_name":"golang-golang-x-crypto-dev","binary_version":"1:0.0~git20200221.2aa609c-1ubuntu0.1~esm3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh-ssh1","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/openssh-ssh1?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-11build1"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client-ssh1","binary_version":"1:7.5p1-11build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"putty","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/putty?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.72-1","0.73-1","0.73-2"],"ecosystem_specific":{"binaries":[{"binary_name":"pterm","binary_version":"0.73-2"},{"binary_name":"putty","binary_version":"0.73-2"},{"binary_name":"putty-tools","binary_version":"0.73-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:FIPS-updates:20.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=fips-updates%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.2p1-4ubuntu0.fips.0.10"}]}],"versions":["1:8.2p1-4ubuntu0.fips.0.2.1","1:8.2p1-4ubuntu0.fips.0.4.0","1:8.2p1-4ubuntu0.fips.0.5.0","1:8.2p1-4ubuntu0.fips.0.7","1:8.2p1-4ubuntu0.fips.0.8","1:8.2p1-4ubuntu0.fips.0.9"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"openssh-client","binary_version":"1:8.2p1-4ubuntu0.fips.0.10"},{"binary_name":"openssh-server","binary_version":"1:8.2p1-4ubuntu0.fips.0.10"},{"binary_name":"openssh-sftp-server","binary_version":"1:8.2p1-4ubuntu0.fips.0.10"},{"binary_name":"openssh-tests","binary_version":"1:8.2p1-4ubuntu0.fips.0.10"},{"binary_name":"ssh","binary_version":"1:8.2p1-4ubuntu0.fips.0.10"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:8.2p1-4ubuntu0.fips.0.10"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:Pro:FIPS:20.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=fips%2Ffocal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:8.2p1-4ubuntu0.fips.0.2.1"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client","binary_version":"1:8.2p1-4ubuntu0.fips.0.2.1"},{"binary_name":"openssh-server","binary_version":"1:8.2p1-4ubuntu0.fips.0.2.1"},{"binary_name":"openssh-sftp-server","binary_version":"1:8.2p1-4ubuntu0.fips.0.2.1"},{"binary_name":"openssh-tests","binary_version":"1:8.2p1-4ubuntu0.fips.0.2.1"},{"binary_name":"ssh","binary_version":"1:8.2p1-4ubuntu0.fips.0.2.1"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:8.2p1-4ubuntu0.fips.0.2.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"dropbear","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/dropbear?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2020.81-5ubuntu0.1"}]}],"versions":["2020.81-3","2020.81-4","2020.81-5"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"dropbear","binary_version":"2020.81-5ubuntu0.1"},{"binary_name":"dropbear-bin","binary_version":"2020.81-5ubuntu0.1"},{"binary_name":"dropbear-initramfs","binary_version":"2020.81-5ubuntu0.1"},{"binary_name":"dropbear-run","binary_version":"2020.81-5ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"filezilla","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/filezilla?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.58.0-1ubuntu0.1"}]}],"versions":["3.52.2-3","3.56.0-1","3.56.2-1","3.57.0-1","3.57.0-1build1","3.58.0-1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"filezilla","binary_version":"3.58.0-1ubuntu0.1"},{"binary_name":"filezilla-common","binary_version":"3.58.0-1ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"libssh","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/libssh?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.6-2ubuntu0.22.04.2"}]}],"versions":["0.9.6-1","0.9.6-1build1","0.9.6-2","0.9.6-2build1","0.9.6-2ubuntu0.22.04.1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"libssh-4","binary_version":"0.9.6-2ubuntu0.22.04.2"},{"binary_name":"libssh-gcrypt-4","binary_version":"0.9.6-2ubuntu0.22.04.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:8.9p1-3ubuntu0.5"}]}],"versions":["1:8.4p1-6ubuntu2","1:8.7p1-2","1:8.7p1-2build1","1:8.7p1-4","1:8.8p1-1","1:8.9p1-3","1:8.9p1-3ubuntu0.1","1:8.9p1-3ubuntu0.3","1:8.9p1-3ubuntu0.4"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"openssh-client","binary_version":"1:8.9p1-3ubuntu0.5"},{"binary_name":"openssh-server","binary_version":"1:8.9p1-3ubuntu0.5"},{"binary_name":"openssh-sftp-server","binary_version":"1:8.9p1-3ubuntu0.5"},{"binary_name":"openssh-tests","binary_version":"1:8.9p1-3ubuntu0.5"},{"binary_name":"ssh","binary_version":"1:8.9p1-3ubuntu0.5"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:8.9p1-3ubuntu0.5"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh-ssh1","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/openssh-ssh1?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-12","1:7.5p1-12build1","1:7.5p1-13"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client-ssh1","binary_version":"1:7.5p1-13"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"paramiko","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/paramiko?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.3-0ubuntu1.2"}]}],"versions":["2.7.2-1ubuntu1","2.8.0-1ubuntu1","2.8.1-1ubuntu1","2.8.1-1ubuntu2","2.8.1-1ubuntu3","2.9.3-0ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"python3-paramiko","binary_version":"2.9.3-0ubuntu1.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"putty","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/putty?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.75-3","0.76-1","0.76-2"],"ecosystem_specific":{"binaries":[{"binary_name":"pterm","binary_version":"0.76-2"},{"binary_name":"putty","binary_version":"0.76-2"},{"binary_name":"putty-tools","binary_version":"0.76-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"golang-go.crypto","ecosystem":"Ubuntu:Pro:22.04:LTS","purl":"pkg:deb/ubuntu/golang-go.crypto?arch=source&distro=esm-apps%2Fjammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.0~git20201221.eec23a3-1","1:0.0~git20211202.5770296-1","1:0.0~git20211202.5770296-1ubuntu0.1~esm1","1:0.0~git20211202.5770296-1ubuntu0.1~esm2","1:0.0~git20211202.5770296-1ubuntu0.1~esm3"],"ecosystem_specific":{"binaries":[{"binary_name":"golang-golang-x-crypto-dev","binary_version":"1:0.0~git20211202.5770296-1ubuntu0.1~esm3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"python-asyncssh","ecosystem":"Ubuntu:Pro:22.04:LTS","purl":"pkg:deb/ubuntu/python-asyncssh?arch=source&distro=esm-apps%2Fjammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.0-1ubuntu0.1~esm1"}]}],"versions":["2.5.0-1"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_name":"python3-asyncssh","binary_version":"2.5.0-1ubuntu0.1~esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"dropbear","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/dropbear?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2022.83-2","2022.83-3","2022.83-4"],"ecosystem_specific":{"binaries":[{"binary_name":"dropbear","binary_version":"2022.83-4"},{"binary_name":"dropbear-bin","binary_version":"2022.83-4"},{"binary_name":"dropbear-initramfs","binary_version":"2022.83-4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"filezilla","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/filezilla?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.66.4-1"}]}],"versions":["3.65.0-3","3.66.1-2","3.66.1-3","3.66.1-3.2","3.66.1-4"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"filezilla","binary_version":"3.66.4-1"},{"binary_name":"filezilla-common","binary_version":"3.66.4-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/openssh?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:9.6p1-3ubuntu1"}]}],"versions":["1:9.3p1-1ubuntu3","1:9.4p1-1ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"openssh-client","binary_version":"1:9.6p1-3ubuntu1"},{"binary_name":"openssh-server","binary_version":"1:9.6p1-3ubuntu1"},{"binary_name":"openssh-sftp-server","binary_version":"1:9.6p1-3ubuntu1"},{"binary_name":"openssh-tests","binary_version":"1:9.6p1-3ubuntu1"},{"binary_name":"ssh","binary_version":"1:9.6p1-3ubuntu1"},{"binary_name":"ssh-askpass-gnome","binary_version":"1:9.6p1-3ubuntu1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh-ssh1","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/openssh-ssh1?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-14","1:7.5p1-15","1:7.5p1-15build1","1:7.5p1-16"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client-ssh1","binary_version":"1:7.5p1-16"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"paramiko","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/paramiko?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.12.0-2ubuntu4"}]}],"versions":["2.12.0-2ubuntu1"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"python3-paramiko","binary_version":"2.12.0-2ubuntu4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"putty","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/putty?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.78-3","0.79-1","0.80-1","0.80-1build2","0.80-1build3","0.81-1"],"ecosystem_specific":{"binaries":[{"binary_name":"pterm","binary_version":"0.81-1"},{"binary_name":"putty","binary_version":"0.81-1"},{"binary_name":"putty-tools","binary_version":"0.81-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"python-asyncssh","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/python-asyncssh?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10.1-2ubuntu0.1"}]}],"versions":["2.10.1-2"],"ecosystem_specific":{"availability":"No subscription required","binaries":[{"binary_name":"python3-asyncssh","binary_version":"2.10.1-2ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"golang-go.crypto","ecosystem":"Ubuntu:Pro:24.04:LTS","purl":"pkg:deb/ubuntu/golang-go.crypto?arch=source&distro=esm-apps%2Fnoble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.4.0-1","1:0.17.0-1","1:0.18.0-1","1:0.19.0-1","1:0.19.0-1ubuntu0.1~esm1","1:0.19.0-1ubuntu0.1~esm2","1:0.19.0-1ubuntu0.1~esm3"],"ecosystem_specific":{"binaries":[{"binary_name":"golang-golang-x-crypto-dev","binary_version":"1:0.19.0-1ubuntu0.1~esm3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"dropbear","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/dropbear?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2024.86-2","2025.88-2"],"ecosystem_specific":{"binaries":[{"binary_name":"dropbear","binary_version":"2025.88-2"},{"binary_name":"dropbear-bin","binary_version":"2025.88-2"},{"binary_name":"dropbear-initramfs","binary_version":"2025.88-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"golang-go.crypto","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/golang-go.crypto?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.25.0-1","1:0.25.0-1ubuntu0.1"],"ecosystem_specific":{"binaries":[{"binary_name":"golang-golang-x-crypto-dev","binary_version":"1:0.25.0-1ubuntu0.1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh-ssh1","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/openssh-ssh1?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client-ssh1","binary_version":"1:7.5p1-17"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"proftpd-dfsg","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/proftpd-dfsg?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.8.c+dfsg-2","1.3.8.c+dfsg-4","1.3.9~dfsg-3"],"ecosystem_specific":{"binaries":[{"binary_name":"proftpd-core","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-crypto","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-geoip","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-ldap","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-mysql","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-odbc","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-pgsql","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-snmp","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-sqlite","binary_version":"1.3.9~dfsg-3"},{"binary_name":"proftpd-mod-wrap","binary_version":"1.3.9~dfsg-3"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"dropbear","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/dropbear?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2025.88-2","2025.89-1"],"ecosystem_specific":{"binaries":[{"binary_name":"dropbear","binary_version":"2025.89-1"},{"binary_name":"dropbear-bin","binary_version":"2025.89-1"},{"binary_name":"dropbear-initramfs","binary_version":"2025.89-1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"openssh-ssh1","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/openssh-ssh1?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:7.5p1-17","1:7.5p1-18"],"ecosystem_specific":{"binaries":[{"binary_name":"openssh-client-ssh1","binary_version":"1:7.5p1-18"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"proftpd-dfsg","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/proftpd-dfsg?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.9~dfsg-3","1.3.9~dfsg-4"],"ecosystem_specific":{"binaries":[{"binary_name":"proftpd-core","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-crypto","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-geoip","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-ldap","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-mysql","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-odbc","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-pgsql","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-snmp","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-sqlite","binary_version":"1.3.9~dfsg-4"},{"binary_name":"proftpd-mod-wrap","binary_version":"1.3.9~dfsg-4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}},{"package":{"name":"golang-go.crypto","ecosystem":"Ubuntu:Pro:26.04:LTS","purl":"pkg:deb/ubuntu/golang-go.crypto?arch=source&distro=esm-apps%2Fresolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:0.25.0-1","1:0.45.0-1","1:0.47.0-1","1:0.47.0-1ubuntu0.1~esm1"],"ecosystem_specific":{"binaries":[{"binary_name":"golang-golang-x-crypto-dev","binary_version":"1:0.47.0-1ubuntu0.1~esm1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2023/UBUNTU-CVE-2023-48795.json"}}],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2023-48795"},{"type":"REPORT","url":"https://terrapin-attack.com/"},{"type":"REPORT","url":"https://www.openwall.com/lists/oss-security/2023/12/18/3"},{"type":"REPORT","url":"https://github.com/ronf/asyncssh/security/advisories/GHSA-hfmc-7525-mj55"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6560-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6561-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6560-2"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6585-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6589-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6598-1"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2023-48795"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-6738-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7051-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7297-1"},{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-7292-1"}],"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"type":"Ubuntu","score":"medium"}]}