Asyncssh Project Asyncssh — known CVE vulnerabilities

Every CVE whose affected-product data names Asyncssh Project Asyncssh, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-7749 — CVSS 9.8 (critical): The SSH server implementation of AsyncSSH before 1.12.1 does not properly check whether authentication is completed before processing other…
• CVE-2023-46446 — CVSS 6.8 (medium): An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and…
• CVE-2023-46445 — CVSS 5.9 (medium): An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a…
• CVE-2023-48795 — CVSS 5.9 (medium): The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to…