VDB

GCVE-110-MAGEIA-2024-34

GCVE-110-MAGEIA-2024-34
Advisory Published
Vulnetix · Advisory published February 10, 2024
Fabian Baeumer, Marcus Brinkmann and Joerg Schwenk discovered that the SSH protocol used in FileZilla is prone to a prefix truncation attack, known as the "Terrapin attack". A remote attacker could use this issue to downgrade or disable some security features and obtain sensitive information. This update fixes the issue.

Affected Products

VendorProductVersionsPlatforms
Mageiacurseofwar0 (affected), 1.3.0-2.1.mga9 (unaffected)
Mageiafilezilla0 (affected), 3.66.4-1.mga9 (unaffected), 0 (affected), 3.66.4-1.mga9 (unaffected)
Mageialibfilezilla0.45.0-1.mga9 (unaffected), 0 (affected), 0 (affected), 0.45.0-1.mga9 (unaffected)

Browse GCVE Records

74,355 records in the GCVE database · Updated July 23, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›