CVE-2023-46446: Vulnerability in AsyncSSH Allows Remote Control of SSH Client Session
Summary
CVE-2023-46446: An issue in AsyncSSH v2.14.0 and earlier allows attackers to control the remote end of an SSH client session via packet injection/removal and shell emulation. Affects asyncssh versions < 2.14.1. Fixed in 2.14.1. How to fix ↓
Also tracked for
- python-asyncssh · Debian:11
The same CVE-2023-46446 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
AsyncSSH is a Python package available on PyPI that provides an asynchronous SSH client and server implementation. It allows users to establish secure SSH connections and perform various SSH operations programmatically. The package is widely used in Python applications that require SSH functionality. However, versions up to and including 2.14.0 of AsyncSSH are affected by a vulnerability that enables attackers to manipulate the remote end of an SSH client session through packet injection/removal and shell emulation.
Vulnerability Detail
The vulnerability in AsyncSSH arises from a lack of proper input validation and handling of SSH packets. By injecting or removing packets during an SSH session, an attacker can gain control over the remote end of the session. This control allows them to execute arbitrary commands, potentially leading to unauthorized access, data leakage, or other malicious activities. The vulnerability's severity is rated as CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N with a score of 6.8.
How To Fix
Minimum fixed version
2.14.1
This is the first release that contains the fix.
pip install --upgrade "asyncssh==2.14.1"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can consider implementing network-level protections such as firewalls or intrusion detection systems to monitor and block suspicious SSH traffic. Additionally, restricting SSH access to trusted networks or IP addresses can help mitigate the risk of exploitation.
Conclusion
The vulnerability in AsyncSSH allows attackers to control the remote end of an SSH client session, potentially leading to unauthorized access and malicious activities. It is crucial to upgrade to AsyncSSH version 2.14.1 or later to mitigate this vulnerability. Implementing network-level protections and restricting SSH access can provide additional security measures. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for asyncssh →
FAQ
AsyncSSH is a Python package that provides an asynchronous SSH client and server implementation.
Versions up to and including 2.14.0 of AsyncSSH are affected.
By exploiting this vulnerability, an attacker can gain control over the remote end of an SSH client session, allowing them to execute arbitrary commands and potentially perform unauthorized actions.
To fix the vulnerability, it is recommended to upgrade to AsyncSSH version 2.14.1 or later.
As a temporary workaround, users can consider implementing network-level protections and restricting SSH access to trusted networks or IP addresses.
References
Related vulnerabilities
Recent vulnerabilities recorded for asyncssh.
