Terrapin

lore

cryptographysecurity

A 2023 attack that can weaken or truncate the SSH handshake.

Terrapin manipulated sequence numbers during the SSH handshake to strip messages and downgrade security in specific configurations. It prompted updates to OpenSSH and other SSH implementations.

Also known as: Terrapin, CVE-2023-48795

Sources

CVE-2023-48795 (2023)

← All glossary entries