Security Update for python-asyncssh
Summary
DLA-3730-1: python-asyncssh - security update. Affects python-asyncssh versions < 1.12.2-1+deb10u1. Fixed in 1.12.2-1+deb10u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
python-asyncssh is a Python library that provides an asynchronous SSHv2 client and server implementation. It allows developers to create SSH connections and perform secure remote operations. The library is widely used in various applications that require SSH functionality.
Vulnerability Detail
The vulnerability identified in python-asyncssh is tracked as CVE-2023-48795. It is a security issue that could potentially allow an attacker to execute arbitrary code or cause a denial of service (DoS) by sending specially crafted SSH packets. The vulnerability affects versions prior to 1.12.2-1+deb10u1 in the Debian 10 ecosystem.
How To Fix
Minimum fixed version
1.12.2-1+deb10u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade python-asyncsshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to apply the security update to ensure the system is protected.
Conclusion
It is crucial to update python-asyncssh to the latest version to protect the system from potential attacks. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for python-asyncssh →
FAQ
python-asyncssh is a Python library that provides an asynchronous SSHv2 client and server implementation.
The vulnerability could allow an attacker to execute arbitrary code or cause a denial of service (DoS) by sending specially crafted SSH packets.
Versions prior to 1.12.2-1+deb10u1 in the Debian 10 ecosystem are affected.
To fix the vulnerability, update python-asyncssh to version 1.12.2-1+deb10u1 or later.
No, there is no known workaround for this vulnerability. Applying the security update is necessary.
Related vulnerabilities
Recent vulnerabilities recorded for python-asyncssh.
