Test ID:	1.3.6.1.4.1.25623.1.0.104635
Category:	General
Title:	OpenBSD OpenSSH < 9.3 Unspecified Vulnerability
Summary:	OpenBSD OpenSSH is prone to an unspecified vulnerability.
Description:	Summary: OpenBSD OpenSSH is prone to an unspecified vulnerability. Vulnerability Insight: ssh(1): Portable OpenSSH provides an implementation of the getrrsetbyname(3) function if the standard library does not provide it, for use by the VerifyHostKeyDNS feature. A specifically crafted DNS response could cause this function to perform an out-of-bounds read of adjacent stack data, but this condition does not appear to be exploitable beyond denial-of-service to the ssh(1) client. The getrrsetbyname(3) replacement is only included if the system's standard library lacks this function and portable OpenSSH was not compiled with the ldns library (--with-ldns). getrrsetbyname(3) is only invoked if using VerifyHostKeyDNS to fetch SSHFP records.This problem was found by the Coverity static analyzer. Affected Software/OS: OpenBSD OpenSSH prior to version 9.3. Solution: Update to version 9.3 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2023 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.