CVE-2023-51767

HIGHScheduled

Published:Dec 24, 2023(2 years ago)

Modified:Nov 18, 2025

Local AccessNo Interaction

Vulnerability Description

OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we do not consider it to be the application's responsibility to defend against platform architectural weaknesses."

Attack Characteristics

Local AccessHigh ComplexityLow PrivilegesNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

Vendor	Product	Versions	Fixed In
openbsd	openssh	-	-
fedoraproject	fedora	-	-
redhat	enterprise_linux	-

Timeline

Published
CVE disclosed publicly
Dec 24, 20232 years ago
Last Modified
Most recent update
Nov 18, 20256 months ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

https://access.redhat.com/security/cve/CVE-2023-51767Third Party Advisory
https://arxiv.org/abs/2309.02545Technical Description
https://bugzilla.redhat.com/show_bug.cgi?id=2255850Issue Tracking

CVSS Score

v3.1

7.0/ 10.0

HIGH

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

At a Glance

Affected Products

References

openbsd / openssh

https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d8...Product

https://security.netapp.com/advisory/ntap-20240125-0006/Third Party Advisory

https://ubuntu.com/security/CVE-2023-51767Third Party Advisory

https://www.openwall.com/lists/oss-security/2025/09/22/1

http://www.openwall.com/lists/oss-security/2025/09/22/1

http://www.openwall.com/lists/oss-security/2025/09/22/2

http://www.openwall.com/lists/oss-security/2025/09/23/1

http://www.openwall.com/lists/oss-security/2025/09/23/3

http://www.openwall.com/lists/oss-security/2025/09/23/4

http://www.openwall.com/lists/oss-security/2025/09/23/5

http://www.openwall.com/lists/oss-security/2025/09/24/4

http://www.openwall.com/lists/oss-security/2025/09/24/7

http://www.openwall.com/lists/oss-security/2025/09/25/2

http://www.openwall.com/lists/oss-security/2025/09/25/6

http://www.openwall.com/lists/oss-security/2025/09/26/2

http://www.openwall.com/lists/oss-security/2025/09/26/4

http://www.openwall.com/lists/oss-security/2025/09/27/1

http://www.openwall.com/lists/oss-security/2025/09/27/2

http://www.openwall.com/lists/oss-security/2025/09/27/3

http://www.openwall.com/lists/oss-security/2025/09/27/4

http://www.openwall.com/lists/oss-security/2025/09/27/5

http://www.openwall.com/lists/oss-security/2025/09/27/6

http://www.openwall.com/lists/oss-security/2025/09/27/7

http://www.openwall.com/lists/oss-security/2025/09/28/7

http://www.openwall.com/lists/oss-security/2025/09/29/1

http://www.openwall.com/lists/oss-security/2025/09/29/4

http://www.openwall.com/lists/oss-security/2025/09/29/5

http://www.openwall.com/lists/oss-security/2025/09/29/6

http://www.openwall.com/lists/oss-security/2025/10/01/1

http://www.openwall.com/lists/oss-security/2025/10/01/2

https://access.redhat.com/security/cve/CVE-2023-51767Third Party Advisory

https://arxiv.org/abs/2309.02545Technical Description

https://bugzilla.redhat.com/show_bug.cgi?id=2255850Issue Tracking

https://github.com/openssh/openssh-portable/blob/8241b9c0529228b4b86d8...Product

https://security.netapp.com/advisory/ntap-20240125-0006/Third Party Advisory

https://ubuntu.com/security/CVE-2023-51767Third Party Advisory

CVSS v3 Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability

Attack VectorLocal

Attack ComplexityHigh

Privileges RequiredLow

User InteractionNone

Impact

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

Impact Analysis

ConfidentialityHigh

NoneLowHigh

IntegrityHigh

NoneLowHigh

AvailabilityHigh

NoneLowHigh

CVE-2023-51767

✦ Vulnerability Description

Attack Characteristics

Affected Software

Timeline

References

CVSS Score

At a Glance

Official Sources

CVSS v3 Vector

Impact Analysis

Vulnerability Description