Solution
Please Install the Updated Packages.
Insight
Markus Friedl discovered that OpenSSH incorrectly handled memory when the AES-GCM cipher was used. A remote authenticated attacker could use this issue to execute arbitrary code as their user, possibly bypassing shell or command restrictions.
Affected
openssh on Ubuntu 13.10
Severity
Classification
-
CVE CVE-2013-4548 -
CVSS Base Score: 6.0
AV:N/AC:M/Au:S/C:P/I:P/A:P
Related Vulnerabilities