VDB
CGA-j4w7-f2rx-qgg7
CGA-j4w7-f2rx-qgg7
REJECTED
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Chainguard | opentofu | 0, 0, 0 |
| Chainguard | opentofu-local-provider-config | 0, 0, 0 |
| Chainguard | opentofu-compat | 0, 0, 0 |
| Wolfi | opentofu-local-provider-config | 0, 0, 0 |
| Wolfi | opentofu | 0, 0, 0 |
| Wolfi | opentofu-compat | 0, 0, 0 |
Exploit Intelligence
- Fast, parallel SSH discovery and security auditing across hosts and CIDR ranges: identifies SSH on any port in real time, then flags auth methods, weak crypto, Terrapin (CVE-2023-48795), and reused host keys. (github-poc-repo)
- Fast, parallel SSH discovery and security auditing across hosts and CIDR ranges: identifies SSH on any port in real time, then flags auth methods, weak crypto, Terrapin (CVE-2023-48795), and reused host keys. (github-poc)
- Mr-Whiskerss/SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker (github-poc-repo)
- Mr-Whiskerss/SSH-Terrapin-Prefix-Truncation-Weakness-CVE-2023-48795-Checker (github-poc)
- Scanner para identificação de servidores com softwares SSH possivelmente vulnerável às CVEs CVE-2024-6387 e CVE-2023-48795. (github-poc)
- Scanner para identificação de servidores com softwares SSH possivelmente vulnerável às CVEs CVE-2024-6387 e CVE-2023-48795. (github-poc-repo)
- A Python-based tool to check for vulnerabilities in OpenSSH installations on local or remote systems by scanning specific IPs. It checks if the OpenSSH version is affected by CVE-2023-48795 (github-poc-repo)
- Python tool to identify SSH servers potentially vulnerable to CVE-2023-48795 (Terrapin) by analyzing OpenSSH version banners via netcat. Useful for internal audits, penetration testing, and vulnerability assessments. (github-poc-repo)
- SSH Terrapin Attack Vulnerability Scanner (CVE-2023-48795) (github-poc-repo)
- SSH Terrapin Attack Vulnerability Scanner (CVE-2023-48795) (github-poc)
…and 13 more exploits
Timeline
- Jan 28, 2026 CVE Rejected