OpenSSH through 9.6, when common types of DRAM are used, might allow row hammer attacks (for authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-location in which the attacker has user privileges.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for
    authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not
    resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-
    location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states "we
    do not consider it to be the application's responsibility to defend against platform architectural
    weaknesses." (CVE-2023-51767)

Linux/Unix 主機上安裝了一個或多個受到弱點影響的套件，且供應商未提供可用的修補程式。

  - 使用常見類型的 DRAM 時到 10.0為止的 OpenSSH 可能會允許 Row Hammer 攻擊 (用於驗證繞過)因為 mm_answer_authpassword 中 authenticated 的整數值並未阻止單一位元翻轉。注意這適用於攻擊者擁有使用者權限的特定攻擊者-受害者共置威脅模型。注意供應商對此存有爭議指出我們認為應用程式不應負責防禦平台架構弱點。 (CVE-2023-51767)

請注意，Nessus 的判定取決於廠商所報告的套件是否存在。

Linux/Unix 主机中安装的一个或多个程序包受到一个漏洞影响，而供应商没有提供补丁程序。

  - OpenSSH 及之前版本 10.0在使用常见类型的 DRAM 时可能允许行攻击者攻击用于身份验证绕过因为 mm_answer_authpassword 中经过身份验证的整数值无法抵御单个位的翻转。注意此问题适用于攻击者具有用户权限的攻击者-受害者并置的特定威胁模型。注意供应商对此存在争议其声明我们不认为应用程序有责任防御平台架构弱点。 (CVE-2023-51767)

请注意，Nessus 依赖供应商报告的程序包是否存在进行判断。

Linux/Unix ホストには、ベンダーが提供するパッチが利用できない脆弱性の影響を受ける複数のパッケージがインストールされています。

  - 10.0までの OpenSSH は、一般的なタイプの DRAM が使用されるとき、mm_answer_authpassword で認証された の整数値が単一ビットのフリップに対応しないため、認証バイパス用の列破壊攻撃を引き起こす可能性があります。注これは、攻撃者がユーザー権限を有する、攻撃者と被害者のコロケーションの特定の脅威モデルに適用されます。注これは Supplier によって異議申し立てされており、当社ではプラットフォームのアーキテクチャの脆弱性に対する防御はアプリケーションの責任であるとは考えていません。CVE-2023-51767

Nessus は、ベンダーによって報告されたパッケージの存在に依存していることに注意してください。

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - OpenSSH through 10.0, when common types of DRAM are used, might allow row hammer attacks (for     authentication bypass) because the integer value of authenticated in mm_answer_authpassword does not     resist flips of a single bit. NOTE: this is applicable to a certain threat model of attacker-victim co-     location in which the attacker has user privileges. NOTE: this is disputed by the Supplier, who states we     do not consider it to be the application's responsibility to defend against platform architectural     weaknesses. (CVE-2023-51767)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名稱	產品	系列	已發布	已更新	嚴重性
503821	Siemens SIMATIC Devices Improper Input Validation (CVE-2023-51767)	Tenable OT Security	Tenable.ot	2025/10/29	2025/10/29	high
436892	Alpine: multiple openssh packages: security update to 9.7_p1-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2026/1/22	2026/7/2	high
436892	Alpine: multiple openssh packages: security update to 9.7_p1-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2026/1/22	2026/7/2	high
227195	Linux Distros 未修補的弱點：CVE-2023-51767	Nessus	Misc.	2025/3/5	2025/9/30	high
227195	Linux Distros 未修补的漏洞：CVE-2023-51767	Nessus	Misc.	2025/3/5	2025/9/30	high
227195	Linux Distros のパッチ未適用の脆弱性: CVE-2023-51767	Nessus	Misc.	2025/3/5	2025/9/30	high
227195	Linux Distros Unpatched Vulnerability : CVE-2023-51767	Nessus	Misc.	2025/3/5	2025/9/30	high

偵測

搜尋 Plugin

high

high

high

high

high

high

high