Row Hammer Attack Vulnerability in OpenSSH by OpenBSD

CVE-2023-51767

What is CVE-2023-51767?

A vulnerability in OpenSSH, particularly affecting versions up to 9.6, allows for potential row hammer attacks due to the integer handling in the authentication process. This issue arises when certain types of DRAM are employed, leading to the possibility of single-bit flips that may enable authentication bypass. It is significant in scenarios where an attacker and victim share the same physical environment and where the attacker possesses user privileges, thus posing a threat within that specific model.

References