Vulnerability CVE-2023-48795: Information

Description

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negotiation message), and a client and server may consequently end up with a connection for which some security features have been downgraded or disabled, aka a Terrapin attack. This occurs because the SSH Binary Packet Protocol (BPP), implemented by these extensions, mishandles the handshake phase and mishandles use of sequence numbers. For example, there is an effective attack against SSH's use of ChaCha20-Poly1305 (and CBC with Encrypt-then-MAC). The bypass occurs in chacha20-poly1305@openssh.com and (if CBC is used) the -etm@openssh.com MAC algorithms. This also affects Maverick Synergy Java SSH API before 3.1.0-SNAPSHOT, Dropbear through 2022.83, Ssh before 5.1.1 in Erlang/OTP, PuTTY before 0.80, AsyncSSH before 2.14.2, golang.org/x/crypto before 0.17.0, libssh before 0.10.6, libssh2 through 1.11.0, Thorn Tech SFTP Gateway before 3.4.6, Tera Term before 5.1, Paramiko before 3.4.0, jsch before 0.2.15, SFTPGo before 2.5.6, Netgate pfSense Plus through 23.09.1, Netgate pfSense CE through 2.7.2, HPN-SSH through 18.2.0, ProFTPD before 1.3.8b (and before 1.3.9rc2), ORYX CycloneSSH before 2.3.4, NetSarang XShell 7 before Build 0144, CrushFTP before 10.6.0, ConnectBot SSH library before 2.2.22, Apache MINA sshd through 2.11.0, sshj through 0.37.0, TinySSH through 20230101, trilead-ssh2 6401, LANCOM LCOS and LANconfig, FileZilla before 3.66.4, Nova before 11.8, PKIX-SSH before 14.4, SecureCRT before 9.4.3, Transmit5 before 5.10.4, Win32-OpenSSH before 9.5.0.0p1-Beta, WinSCP before 6.2.2, Bitvise SSH Server before 9.32, Bitvise SSH Client before 9.33, KiTTY through 0.76.1.13, the net-ssh gem 7.2.0 for Ruby, the mscdex ssh2 module before 1.15.0 for Node.js, the thrussh library before 0.35.1 for Rust, and the Russh crate before 0.40.2 for Rust.

Severity: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-48795

Published: Dec. 18, 2023

Modified: Dec. 2, 2024

Error type identifier: CWE-354

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
cri-o1.27	sisyphus	1.27.6-alt1	1.27.8-alt1	ALT-PU-2024-8173-4	348675	Fixed
cri-o1.27	sisyphus_riscv64	1.27.6-alt1	1.27.8-alt1	ALT-PU-2024-8511-1	-	Fixed
cri-o1.27	sisyphus_loongarch64	1.27.6-alt1	1.27.8-alt1	ALT-PU-2024-8530-1	-	Fixed
cri-o1.27	p10	1.27.6-alt1	1.27.8-alt1	ALT-PU-2024-8542-2	349874	Fixed
cri-o1.27	c10f2	1.27.6-alt1	1.27.8-alt1	ALT-PU-2024-8602-2	350021	Fixed
cri-o1.27	p11	1.27.6-alt1	1.27.8-alt1	ALT-PU-2024-8463-2	349631	Fixed
cri-o1.28	sisyphus	1.28.6-alt1	1.28.11-alt1	ALT-PU-2024-8175-5	348675	Fixed
cri-o1.28	sisyphus_riscv64	1.28.6-alt1	1.28.11-alt1	ALT-PU-2024-8513-1	-	Fixed
cri-o1.28	sisyphus_loongarch64	1.28.6-alt1	1.28.11-alt1	ALT-PU-2024-8532-1	-	Fixed
cri-o1.28	p10	1.28.6-alt1	1.28.10-alt1	ALT-PU-2024-8544-2	349874	Fixed
cri-o1.28	c10f2	1.28.6-alt1	1.28.10-alt1	ALT-PU-2024-8605-2	350021	Fixed
cri-o1.28	p11	1.28.6-alt1	1.28.10-alt1	ALT-PU-2024-8461-2	349631	Fixed
dropbear	sisyphus	2022.83-alt2	2025.87-alt1	ALT-PU-2024-2108-2	340391	Fixed
dropbear	sisyphus_e2k	2022.83-alt2	2024.86-alt1	ALT-PU-2024-4421-1	-	Fixed
dropbear	sisyphus_loongarch64	2022.83-alt2	2025.87-alt1	ALT-PU-2024-2144-1	-	Fixed
dropbear	p10	2022.83-alt2	2022.83-alt2	ALT-PU-2024-4252-2	343137	Fixed
dropbear	p10_e2k	2022.83-alt2	2022.83-alt2	ALT-PU-2024-4514-1	-	Fixed
dropbear	c10f2	2024.85-alt1	2024.85-alt1	ALT-PU-2024-7175-3	345878	Fixed
dropbear	p11	2022.83-alt2	2024.86-alt1	ALT-PU-2024-2108-2	340391	Fixed
erlang	sisyphus	26.2.5.3-alt1	26.2.5.3-alt2	ALT-PU-2024-12987-3	357883	Fixed
erlang	sisyphus_loongarch64	26.2.5.3-alt1	26.2.5.3-alt2	ALT-PU-2024-13247-1	-	Fixed
erlang	p10	26.2.5.3-alt1	26.2.5.3-alt1	ALT-PU-2024-15421-2	362342	Fixed
erlang	c10f2	26.2.5.3-alt1	26.2.5.3-alt1	ALT-PU-2024-13219-2	358196	Fixed
erlang	p11	26.2.5.3-alt1	26.2.5.3-alt1	ALT-PU-2024-13209-3	358194	Fixed
flannel	c10f2	0.25.1-alt2	0.25.7-alt1	ALT-PU-2024-8180-4	348644	Fixed
libssh	sisyphus	0.10.6-alt1	0.11.1-alt1	ALT-PU-2024-1249-1	338050	Fixed
libssh	sisyphus_e2k	0.10.6-alt1	0.11.1-alt1	ALT-PU-2024-1279-1	-	Fixed
libssh	sisyphus_riscv64	0.10.6-alt1	0.11.1-alt1	ALT-PU-2024-2714-1	-	Fixed
libssh	sisyphus_loongarch64	0.10.6-alt1	0.11.1-alt1	ALT-PU-2024-1440-1	-	Fixed
libssh	p10	0.10.6-alt1	0.10.6-alt1	ALT-PU-2024-1251-2	338051	Fixed
libssh	p10_e2k	0.10.6-alt1	0.10.6-alt1	ALT-PU-2024-1381-1	-	Fixed
libssh	c10f2	0.10.6-alt1	0.10.6-alt1	ALT-PU-2024-1250-2	338361	Fixed
libssh	c9f2	0.10.6-alt1	0.10.6-alt1	ALT-PU-2024-1622-4	339475	Fixed
libssh	p11	0.10.6-alt1	0.11.1-alt1	ALT-PU-2024-1249-1	338050	Fixed
libssh2	sisyphus	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-1561-1	339356	Fixed
libssh2	sisyphus_e2k	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-1699-1	-	Fixed
libssh2	sisyphus_riscv64	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-3231-1	-	Fixed
libssh2	sisyphus_loongarch64	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-1601-1	-	Fixed
libssh2	p10	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-1563-2	339351	Fixed
libssh2	p10_e2k	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-1964-1	-	Fixed
libssh2	c10f2	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-1562-2	339357	Fixed
libssh2	c9f2	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-4039-2	342773	Fixed
libssh2	p11	1.11.0-alt2	1.11.0-alt2	ALT-PU-2024-1561-1	339356	Fixed
openquantumsafe-openssh	sisyphus	8.9p1.202310-alt2	8.9p1.202310-alt4	ALT-PU-2024-1046-5	337714	Fixed
openquantumsafe-openssh	c10f2	8.9p1.202310-alt3	8.9p1.202310-alt3	ALT-PU-2024-17393-3	365537	Fixed
openquantumsafe-openssh	p11	8.9p1.202310-alt2	8.9p1.202310-alt4	ALT-PU-2024-1046-5	337714	Fixed
openssh	sisyphus	9.5p1-alt2	9.6p1-alt3	ALT-PU-2024-1247-2	338314	Fixed
openssh	sisyphus_e2k	9.5p1-alt2	9.6p1-alt2	ALT-PU-2024-8876-1	-	Fixed
openssh	sisyphus_riscv64	9.5p1-alt2	9.6p1-alt3	ALT-PU-2024-2876-1	-	Fixed
openssh	sisyphus_loongarch64	9.5p1-alt2	9.6p1-alt3	ALT-PU-2024-1471-1	-	Fixed
openssh	p10	7.9p1-alt4.p10.4	7.9p1-alt4.p10.7	ALT-PU-2024-1190-3	338315	Fixed
openssh	p10_e2k	7.9p1-alt4.p10.4	7.9p1-alt4.p10.7	ALT-PU-2024-1468-1	-	Fixed
openssh	p9	7.9p1-alt4.p10.6	7.9p1-alt4.p10.7	ALT-PU-2024-12012-3	356748	Fixed
openssh	c10f2	7.9p1-alt4.p10.4	7.9p1-alt4.p10.7	ALT-PU-2024-1333-3	338780	Fixed
openssh	c9f2	7.9p1-alt4.p10.4	7.9p1-alt4.p10.7	ALT-PU-2024-1569-3	339369	Fixed
openssh	p11	9.5p1-alt2	9.6p1-alt3	ALT-PU-2024-1247-2	338314	Fixed
openssh-gostcrypto	sisyphus	9.6p1-alt1.gost	9.6p1-alt3.gost	ALT-PU-2024-7269-2	344956	Fixed
openssh-gostcrypto	p10	7.9p1-alt4.gost.p10.1	7.9p1-alt4.gost.p10.4	ALT-PU-2024-3921-4	342647	Fixed
openssh-gostcrypto	p9	7.9p1-alt4.gost.p10.3	7.9p1-alt4.gost.p10.4	ALT-PU-2024-12010-3	356748	Fixed
openssh-gostcrypto	c10f2	7.9p1-alt4.gost.p10.1	7.9p1-alt4.gost.p10.4	ALT-PU-2024-4182-3	343010	Fixed
openssh-gostcrypto	c9f2	7.9p1-alt4.gost.p10.1	7.9p1-alt4.gost.p10.4	ALT-PU-2024-4077-3	342832	Fixed
openssh-gostcrypto	p11	9.6p1-alt2.gost	9.6p1-alt3.gost	ALT-PU-2024-9513-3	351933	Fixed
podman	sisyphus	4.8.3-alt1	5.4.0-alt1	ALT-PU-2024-1096-1	337978	Fixed
podman	sisyphus_riscv64	4.8.3-alt1	5.4.0-alt1	ALT-PU-2024-1101-1	-	Fixed
podman	sisyphus_loongarch64	4.8.3-alt1	5.4.0-alt1	ALT-PU-2024-1104-1	-	Fixed
podman	p11	4.8.3-alt1	5.4.0-alt1	ALT-PU-2024-1096-1	337978	Fixed
proftpd	sisyphus	1.3.9-alt0.1.rc2	1.3.9-alt0.4.rc3	ALT-PU-2024-11072-2	330474	Fixed
proftpd	sisyphus_riscv64	1.3.9-alt0.1.rc2	1.3.9-alt0.4.rc3	ALT-PU-2024-11097-1	-	Fixed
proftpd	sisyphus_loongarch64	1.3.9-alt0.1.rc2	1.3.9-alt0.4.rc3	ALT-PU-2024-11104-1	-	Fixed
putty	sisyphus	0.81-alt1	0.83-alt1	ALT-PU-2024-6830-1	345428	Fixed
putty	sisyphus_e2k	0.81-alt1	0.81-alt2	ALT-PU-2024-6884-1	-	Fixed
putty	sisyphus_loongarch64	0.81-alt1	0.83-alt1	ALT-PU-2024-6895-1	-	Fixed
putty	p10	0.81-alt2	0.81-alt2	ALT-PU-2024-9848-2	351368	Fixed
putty	p10_e2k	0.81-alt2	0.81-alt2	ALT-PU-2024-9995-1	-	Fixed
putty	c10f2	0.81-alt2	0.81-alt2	ALT-PU-2024-9398-2	351553	Fixed
putty	c9f2	0.81-alt2	0.81-alt2	ALT-PU-2024-9396-2	351555	Fixed
putty	p11	0.81-alt1	0.81-alt2	ALT-PU-2024-6830-1	345428	Fixed
python3-module-asyncssh	sisyphus	2.14.2-alt1	2.20.0-alt1	ALT-PU-2024-8723-1	350401	Fixed
python3-module-asyncssh	sisyphus_e2k	2.19.0-alt1	2.19.0-alt1	ALT-PU-2025-4257-1	-	Fixed
python3-module-asyncssh	sisyphus_riscv64	2.14.2-alt1	2.20.0-alt1	ALT-PU-2024-8745-1	-	Fixed
python3-module-asyncssh	sisyphus_loongarch64	2.14.2-alt1	2.20.0-alt1	ALT-PU-2024-8754-1	-	Fixed
python3-module-asyncssh	p11	2.19.0-alt1	2.19.0-alt1	ALT-PU-2025-2804-5	370642	Fixed
python3-module-paramiko	sisyphus	3.4.0-alt1	3.5.1-alt1	ALT-PU-2024-1940-2	339791	Fixed
python3-module-paramiko	sisyphus_e2k	3.4.0-alt1	3.4.0-alt1	ALT-PU-2024-2375-1	-	Fixed
python3-module-paramiko	sisyphus_riscv64	3.4.0-alt1	3.5.1-alt1	ALT-PU-2024-3369-1	-	Fixed
python3-module-paramiko	sisyphus_loongarch64	3.4.0-alt1	3.5.1-alt1	ALT-PU-2024-2089-1	-	Fixed
python3-module-paramiko	p11	3.4.0-alt1	3.4.0-alt1	ALT-PU-2024-1940-2	339791	Fixed
resticprofile	sisyphus	0.25.0-alt1	0.29.1-alt1	ALT-PU-2024-2064-2	340331	Fixed
resticprofile	sisyphus_loongarch64	0.25.0-alt1	0.29.1-alt1	ALT-PU-2024-2140-1	-	Fixed
resticprofile	c10f2	0.25.0-alt1	0.26.0-alt1.1	ALT-PU-2024-2064-2	340331	Fixed
resticprofile	p11	0.25.0-alt1	0.26.0-alt1.1	ALT-PU-2024-2064-2	340331	Fixed
tinyssh	sisyphus	20240101-alt1	20250201-alt1	ALT-PU-2024-1001-2	337569	Fixed
tinyssh	sisyphus_e2k	20240101-alt1	20240101-alt1	ALT-PU-2024-1054-1	-	Fixed
tinyssh	sisyphus_loongarch64	20240101-alt1	20250201-alt1	ALT-PU-2024-1023-1	-	Fixed
tinyssh	p11	20240101-alt1	20240101-alt1	ALT-PU-2024-1001-2	337569	Fixed
vault	sisyphus	1.13.12-alt3	1.13.12-alt6	ALT-PU-2024-9089-3	350936	Fixed
vault	sisyphus_riscv64	1.13.12-alt4	1.13.12-alt6	ALT-PU-2024-9105-1	-	Fixed
vault	sisyphus_loongarch64	1.13.12-alt4	1.13.12-alt6	ALT-PU-2024-9117-1	-	Fixed
vault	p10	1.13.12-alt4	1.13.12-alt6	ALT-PU-2024-9897-3	351699	Fixed
vault	c10f2	1.13.12-alt4	1.13.12-alt6	ALT-PU-2024-9901-3	352701	Fixed
vault	c9f2	1.13.12-alt5	1.13.12-alt6	ALT-PU-2024-12410-2	356974	Fixed
vault	p11	1.13.12-alt4	1.13.12-alt6	ALT-PU-2024-9408-3	351672	Fixed

References to Advisories, Solutions, and Tools

Hyperlink	Resource
http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html	Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html	Third Party Advisory VDB Entry
20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4	Mailing List Third Party Advisory
20240313 APPLE-SA-03-07-2024-2 macOS Sonoma 14.4	Mailing List Third Party Advisory
[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)	Mailing List
[oss-security] 20231218 CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)	Mailing List
[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)	Mailing List
[oss-security] 20231219 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)	Mailing List
[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)	Mailing List Mitigation
[oss-security] 20231220 Re: CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)	Mailing List Mitigation
[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins	Mailing List
[oss-security] 20240306 Multiple vulnerabilities in Jenkins plugins	Mailing List
[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client	Mailing List
[oss-security] 20240417 Terrapin vulnerability in Jenkins CLI client	Mailing List
https://access.redhat.com/security/cve/cve-2023-48795	Third Party Advisory
https://access.redhat.com/security/cve/cve-2023-48795	Third Party Advisory
https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/	Press/Media Coverage
https://arstechnica.com/security/2023/12/hackers-can-break-ssh-channel-integrity-using-novel-data-corruption-attack/	Press/Media Coverage
https://bugs.gentoo.org/920280	Issue Tracking
https://bugs.gentoo.org/920280	Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2254210	Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=2254210	Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1217950	Issue Tracking
https://bugzilla.suse.com/show_bug.cgi?id=1217950	Issue Tracking
https://crates.io/crates/thrussh/versions	Release Notes
https://crates.io/crates/thrussh/versions	Release Notes
https://filezilla-project.org/versions.php	Release Notes
https://filezilla-project.org/versions.php	Release Notes
https://forum.netgate.com/topic/184941/terrapin-ssh-attack	Issue Tracking
https://forum.netgate.com/topic/184941/terrapin-ssh-attack	Issue Tracking
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6	Patch
https://git.libssh.org/projects/libssh.git/commit/?h=stable-0.10&id=10e09e273f69e149389b3e0e5d44b8c221c2e7f6	Patch
https://github.com/advisories/GHSA-45x7-px36-x8w8	Third Party Advisory
https://github.com/advisories/GHSA-45x7-px36-x8w8	Third Party Advisory
https://github.com/apache/mina-sshd/issues/445	Issue Tracking
https://github.com/apache/mina-sshd/issues/445	Issue Tracking
https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab	Patch
https://github.com/connectbot/sshlib/commit/5c8b534f6e97db7ac0e0e579331213aa25c173ab	Patch
https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22	Third Party Advisory
https://github.com/connectbot/sshlib/compare/2.2.21...2.2.22	Third Party Advisory
https://github.com/cyd01/KiTTY/issues/520	Issue Tracking
https://github.com/cyd01/KiTTY/issues/520	Issue Tracking
https://github.com/drakkan/sftpgo/releases/tag/v2.5.6	Release Notes
https://github.com/drakkan/sftpgo/releases/tag/v2.5.6	Release Notes
https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42	Patch
https://github.com/erlang/otp/blob/d1b43dc0f1361d2ad67601169e90a7fc50bb0369/lib/ssh/doc/src/notes.xml#L39-L42	Patch
https://github.com/erlang/otp/releases/tag/OTP-26.2.1	Release Notes
https://github.com/erlang/otp/releases/tag/OTP-26.2.1	Release Notes
https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d	Patch
https://github.com/golang/crypto/commit/9d2ee975ef9fe627bf0a6f01c1f69e8ef1d4f05d	Patch
https://github.com/hierynomus/sshj/issues/916	Issue Tracking
https://github.com/hierynomus/sshj/issues/916	Issue Tracking
https://github.com/janmojzis/tinyssh/issues/81	Issue Tracking
https://github.com/janmojzis/tinyssh/issues/81	Issue Tracking
https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5	Patch
https://github.com/jtesta/ssh-audit/commit/8e972c5e94b460379fe0c7d20209c16df81538a5	Patch
https://github.com/libssh2/libssh2/pull/1291	Mitigation
https://github.com/libssh2/libssh2/pull/1291	Mitigation
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25	Patch
https://github.com/mkj/dropbear/blob/17657c36cce6df7716d5ff151ec09a665382d5dd/CHANGES#L25	Patch
https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3	Patch
https://github.com/mscdex/ssh2/commit/97b223f8891b96d6fc054df5ab1d5a1a545da2a3	Patch
https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15	Product
https://github.com/mwiede/jsch/compare/jsch-0.2.14...jsch-0.2.15	Product
https://github.com/mwiede/jsch/issues/457	Issue Tracking
https://github.com/mwiede/jsch/issues/457	Issue Tracking
https://github.com/mwiede/jsch/pull/461	Release Notes
https://github.com/mwiede/jsch/pull/461	Release Notes
https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16	Patch
https://github.com/net-ssh/net-ssh/blob/2e65064a52d73396bfc3806c9196fc8108f33cd8/CHANGES.txt#L14-L16	Patch
https://github.com/NixOS/nixpkgs/pull/275249	Release Notes
https://github.com/NixOS/nixpkgs/pull/275249	Release Notes
https://github.com/openssh/openssh-portable/commits/master	Patch
https://github.com/openssh/openssh-portable/commits/master	Patch
https://github.com/paramiko/paramiko/issues/2337	Issue Tracking
https://github.com/paramiko/paramiko/issues/2337	Issue Tracking
https://github.com/PowerShell/Win32-OpenSSH/issues/2189	Issue Tracking
https://github.com/PowerShell/Win32-OpenSSH/issues/2189	Issue Tracking
https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta	Release Notes
https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.5.0.0p1-Beta	Release Notes
https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES	Release Notes
https://github.com/proftpd/proftpd/blob/0a7ea9b0ba9fcdf368374a226370d08f10397d99/RELEASE_NOTES	Release Notes
https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES	Release Notes
https://github.com/proftpd/proftpd/blob/d21e7a2e47e9b38f709bec58e3fa711f759ad0e1/RELEASE_NOTES	Release Notes
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES	Release Notes
https://github.com/proftpd/proftpd/blob/master/RELEASE_NOTES	Release Notes
https://github.com/proftpd/proftpd/issues/456	Issue Tracking
https://github.com/proftpd/proftpd/issues/456	Issue Tracking
https://github.com/rapier1/hpn-ssh/releases	Release Notes
https://github.com/rapier1/hpn-ssh/releases	Release Notes
https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst	Release Notes
https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst	Release Notes
https://github.com/ronf/asyncssh/tags	Release Notes
https://github.com/ronf/asyncssh/tags	Release Notes
https://github.com/ssh-mitm/ssh-mitm/issues/165	Issue Tracking
https://github.com/ssh-mitm/ssh-mitm/issues/165	Issue Tracking
https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0	Patch
https://github.com/TeraTermProject/teraterm/commit/7279fbd6ef4d0c8bdd6a90af4ada2899d786eec0	Patch
https://github.com/TeraTermProject/teraterm/releases/tag/v5.1	Release Notes
https://github.com/TeraTermProject/teraterm/releases/tag/v5.1	Release Notes
https://github.com/warp-tech/russh/releases/tag/v0.40.2	Release Notes
https://github.com/warp-tech/russh/releases/tag/v0.40.2	Release Notes
https://gitlab.com/libssh/libssh-mirror/-/tags	Release Notes
https://gitlab.com/libssh/libssh-mirror/-/tags	Release Notes
https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ	Mailing List
https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ	Mailing List
https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg	Mailing List
https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg	Mailing List
https://help.panic.com/releasenotes/transmit5/	Release Notes
https://help.panic.com/releasenotes/transmit5/	Release Notes
https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/	Press/Media Coverage
https://jadaptive.com/important-java-ssh-security-update-new-ssh-vulnerability-discovered-cve-2023-48795/	Press/Media Coverage
[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update	Mailing List
[debian-lts-announce] 20231226 [SECURITY] [DLA 3694-1] openssh security update	Mailing List
[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update	Mailing List Third Party Advisory
[debian-lts-announce] 20240125 [SECURITY] [DLA 3718-1] php-phpseclib security update	Mailing List Third Party Advisory
[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update	Mailing List Third Party Advisory
[debian-lts-announce] 20240125 [SECURITY] [DLA 3719-1] phpseclib security update	Mailing List Third Party Advisory
[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update	Mailing List Third Party Advisory
[debian-lts-announce] 20240425 [SECURITY] [DLA 3794-1] putty security update	Mailing List Third Party Advisory
FEDORA-2024-39a8c72ea9	Mailing List Third Party Advisory
FEDORA-2024-39a8c72ea9	Mailing List Third Party Advisory
FEDORA-2024-3bb23c77f3	Mailing List Third Party Advisory
FEDORA-2024-3bb23c77f3	Mailing List Third Party Advisory
FEDORA-2024-3fd1bc9276	Mailing List Third Party Advisory
FEDORA-2024-3fd1bc9276	Mailing List Third Party Advisory
FEDORA-2023-20feb865d8	Mailing List Third Party Advisory
FEDORA-2023-20feb865d8	Mailing List Third Party Advisory
FEDORA-2024-06ebb70bdd	Mailing List Third Party Advisory
FEDORA-2024-06ebb70bdd	Mailing List Third Party Advisory
FEDORA-2023-e77300e4b5	Mailing List Third Party Advisory
FEDORA-2023-e77300e4b5	Mailing List Third Party Advisory
FEDORA-2024-71c2c6526c	Mailing List Third Party Advisory
FEDORA-2024-71c2c6526c	Mailing List Third Party Advisory
FEDORA-2024-d946b9ad25	Mailing List Third Party Advisory
FEDORA-2024-d946b9ad25	Mailing List Third Party Advisory
FEDORA-2024-ae653fb07b	Mailing List Third Party Advisory
FEDORA-2024-ae653fb07b	Mailing List Third Party Advisory
FEDORA-2023-cb8c606fbb	Mailing List Third Party Advisory
FEDORA-2023-cb8c606fbb	Mailing List Third Party Advisory
FEDORA-2024-7b08207cdb	Mailing List Third Party Advisory
FEDORA-2024-7b08207cdb	Mailing List Third Party Advisory
FEDORA-2024-2705241461	Mailing List Third Party Advisory
FEDORA-2024-2705241461	Mailing List Third Party Advisory
FEDORA-2024-fb32950d11	Mailing List Third Party Advisory
FEDORA-2024-fb32950d11	Mailing List Third Party Advisory
FEDORA-2023-153404713b	Mailing List Third Party Advisory
FEDORA-2023-153404713b	Mailing List Third Party Advisory
FEDORA-2024-a53b24023d	Mailing List Third Party Advisory
FEDORA-2024-a53b24023d	Mailing List Third Party Advisory
FEDORA-2023-55800423a8	Mailing List Third Party Advisory
FEDORA-2023-55800423a8	Mailing List Third Party Advisory
FEDORA-2023-0733306be9	Vendor Advisory
FEDORA-2023-0733306be9	Vendor Advisory
FEDORA-2023-b87ec6cf47	Mailing List Third Party Advisory
FEDORA-2023-b87ec6cf47	Mailing List Third Party Advisory
https://matt.ucc.asn.au/dropbear/CHANGES	Release Notes
https://matt.ucc.asn.au/dropbear/CHANGES	Release Notes
https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC	Patch
https://nest.pijul.com/pijul/thrussh/changes/D6H7OWTTMHHX6BTB3B6MNBOBX2L66CBL4LGSEUSAI2MCRCJDQFRQC	Patch
https://news.ycombinator.com/item?id=38684904	Issue Tracking
https://news.ycombinator.com/item?id=38684904	Issue Tracking
https://news.ycombinator.com/item?id=38685286	Issue Tracking
https://news.ycombinator.com/item?id=38685286	Issue Tracking
https://news.ycombinator.com/item?id=38732005	Issue Tracking
https://news.ycombinator.com/item?id=38732005	Issue Tracking
https://nova.app/releases/#v11.8	Release Notes
https://nova.app/releases/#v11.8	Release Notes
https://oryx-embedded.com/download/#changelog	Release Notes
https://oryx-embedded.com/download/#changelog	Release Notes
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002	Third Party Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0002	Third Party Advisory
https://roumenpetrov.info/secsh/#news20231220	Release Notes
https://roumenpetrov.info/secsh/#news20231220	Release Notes
GLSA-202312-16	Third Party Advisory
GLSA-202312-16	Third Party Advisory
GLSA-202312-17	Third Party Advisory
GLSA-202312-17	Third Party Advisory
https://security.netapp.com/advisory/ntap-20240105-0004/	Third Party Advisory
https://security.netapp.com/advisory/ntap-20240105-0004/	Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2023-48795	Vendor Advisory
https://security-tracker.debian.org/tracker/CVE-2023-48795	Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/libssh2	Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/libssh2	Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg	Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg	Vendor Advisory
https://security-tracker.debian.org/tracker/source-package/trilead-ssh2	Issue Tracking
https://security-tracker.debian.org/tracker/source-package/trilead-ssh2	Issue Tracking
https://support.apple.com/kb/HT214084	Third Party Advisory
https://support.apple.com/kb/HT214084	Third Party Advisory
https://thorntech.com/cve-2023-48795-and-sftp-gateway/	Third Party Advisory
https://thorntech.com/cve-2023-48795-and-sftp-gateway/	Third Party Advisory
https://twitter.com/TrueSkrillor/status/1736774389725565005	Press/Media Coverage
https://twitter.com/TrueSkrillor/status/1736774389725565005	Press/Media Coverage
https://ubuntu.com/security/CVE-2023-48795	Vendor Advisory
https://ubuntu.com/security/CVE-2023-48795	Vendor Advisory
https://winscp.net/eng/docs/history#6.2.2	Release Notes
https://winscp.net/eng/docs/history#6.2.2	Release Notes
https://www.bitvise.com/ssh-client-version-history#933	Release Notes
https://www.bitvise.com/ssh-client-version-history#933	Release Notes
https://www.bitvise.com/ssh-server-version-history	Release Notes
https://www.bitvise.com/ssh-server-version-history	Release Notes
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html	Release Notes
https://www.chiark.greenend.org.uk/~sgtatham/putty/changes.html	Release Notes
https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update	Release Notes
https://www.crushftp.com/crush10wiki/Wiki.jsp?page=Update	Release Notes
DSA-5586	Issue Tracking
DSA-5586	Issue Tracking
DSA-5588	Issue Tracking
DSA-5588	Issue Tracking
https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc	Release Notes
https://www.freebsd.org/security/advisories/FreeBSD-SA-23:19.openssh.asc	Release Notes
https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508	Vendor Advisory
https://www.lancom-systems.de/service-support/allgemeine-sicherheitshinweise#c243508	Vendor Advisory
https://www.netsarang.com/en/xshell-update-history/	Release Notes
https://www.netsarang.com/en/xshell-update-history/	Release Notes
https://www.openssh.com/openbsd.html	Release Notes
https://www.openssh.com/openbsd.html	Release Notes
https://www.openssh.com/txt/release-9.6	Release Notes
https://www.openssh.com/txt/release-9.6	Release Notes
https://www.openwall.com/lists/oss-security/2023/12/18/2	Mailing List
https://www.openwall.com/lists/oss-security/2023/12/18/2	Mailing List
https://www.openwall.com/lists/oss-security/2023/12/20/3	Mailing List Mitigation
https://www.openwall.com/lists/oss-security/2023/12/20/3	Mailing List Mitigation
https://www.paramiko.org/changelog.html	Release Notes
https://www.paramiko.org/changelog.html	Release Notes
https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/	Issue Tracking
https://www.reddit.com/r/sysadmin/comments/18idv52/cve202348795_why_is_this_cve_still_undisclosed/	Issue Tracking
https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/	Press/Media Coverage
https://www.suse.com/c/suse-addresses-the-ssh-v2-protocol-terrapin-attack-aka-cve-2023-48795/	Press/Media Coverage
https://www.terrapin-attack.com	Exploit
https://www.terrapin-attack.com	Exploit
https://www.theregister.com/2023/12/20/terrapin_attack_ssh	Press/Media Coverage
https://www.theregister.com/2023/12/20/terrapin_attack_ssh	Press/Media Coverage
https://www.vandyke.com/products/securecrt/history.txt	Release Notes
https://www.vandyke.com/products/securecrt/history.txt	Release Notes

Affected configurations:
1. Configuration 1
  cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*
  End excluding
  9.6
  
  Configuration 2
  cpe:2.3:a:putty:putty:*:*:*:*:*:*:*:*
  End excluding
  0.80
  
  Configuration 3
  cpe:2.3:a:filezilla-project:filezilla_client:*:*:*:*:*:*:*:*
  End excluding
  3.66.4
  
  Configuration 4
  cpe:2.3:a:microsoft:powershell:*:*:*:*:*:*:*:*
  End including
  11.1.0
  
  Configuration 5
  Running on/with:
  cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
  cpe:2.3:a:panic:transmit_5:*:*:*:*:*:*:*:*
  
  Configuration 6
  Running on/with:
  cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
  cpe:2.3:a:panic:nova:*:*:*:*:*:*:*:*
  
  Configuration 7
  cpe:2.3:a:roumenpetrov:pkixssh:*:*:*:*:*:*:*:*
  End excluding
  14.4
  
  Configuration 8
  cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*
  End excluding
  6.2.2
  
  Configuration 9
  cpe:2.3:a:bitvise:ssh_client:*:*:*:*:*:*:*:*
  End excluding
  9.33
  
  Configuration 10
  cpe:2.3:a:bitvise:ssh_server:*:*:*:*:*:*:*:*
  End excluding
  9.32
  
  Configuration 11
  cpe:2.3:o:lancom-systems:lcos:*:*:*:*:*:*:*:*
  End including
  3.66.4
  
  Configuration 12
  cpe:2.3:o:lancom-systems:lcos_fx:-:*:*:*:*:*:*:*
  
  Configuration 13
  cpe:2.3:o:lancom-systems:lcos_lx:-:*:*:*:*:*:*:*
  
  Configuration 14
  cpe:2.3:o:lancom-systems:lcos_sx:5.20:*:*:*:*:*:*:*
  cpe:2.3:o:lancom-systems:lcos_sx:4.20:*:*:*:*:*:*:*
  
  Configuration 15
  cpe:2.3:o:lancom-systems:lanconfig:-:*:*:*:*:*:*:*
  
  Configuration 16
  cpe:2.3:a:vandyke:securecrt:*:*:*:*:*:*:*:*
  End excluding
  9.4.3
  
  Configuration 17
  cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*
  End excluding
  0.10.6
  
  Configuration 18
  cpe:2.3:a:net-ssh:net-ssh:7.2.0:*:*:*:*:ruby:*:*
  
  Configuration 19
  cpe:2.3:a:ssh2_project:ssh2:*:*:*:*:*:node.js:*:*
  End including
  1.11.0
  
  Configuration 20
  cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*
  End including
  1.3.8b
  
  Configuration 21
  cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*
  End including
  12.4
  
  Configuration 22
  cpe:2.3:a:crates:thrussh:*:*:*:*:*:*:*:*
  End excluding
  0.35.1
  
  Configuration 23
  cpe:2.3:a:tera_term_project:tera_term:*:*:*:*:*:*:*:*
  End including
  5.1
  
  Configuration 24
  cpe:2.3:a:oryx-embedded:cyclone_ssh:*:*:*:*:*:*:*:*
  End excluding
  2.3.4
  
  Configuration 25
  cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*
  End including
  10.6.0
  
  Configuration 26
  cpe:2.3:a:netsarang:xshell_7:*:*:*:*:*:*:*:*
  End excluding
  build__0144
  
  Configuration 27
  cpe:2.3:a:paramiko:paramiko:*:*:*:*:*:*:*:*
  End excluding
  3.4.0
  
  Configuration 28
  cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
  
  Configuration 29
  cpe:2.3:a:redhat:openstack_platform:16.1:*:*:*:*:*:*:*
  cpe:2.3:a:redhat:openstack_platform:16.2:*:*:*:*:*:*:*
  cpe:2.3:a:redhat:openstack_platform:17.1:*:*:*:*:*:*:*
  
  Configuration 30
  cpe:2.3:a:redhat:ceph_storage:6.0:*:*:*:*:*:*:*
  
  Configuration 31
  cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
  
  Configuration 32
  cpe:2.3:a:redhat:openshift_serverless:-:*:*:*:*:*:*:*
  
  Configuration 33
  cpe:2.3:a:redhat:openshift_gitops:-:*:*:*:*:*:*:*
  
  Configuration 34
  cpe:2.3:a:redhat:openshift_pipelines:-:*:*:*:*:*:*:*
  
  Configuration 35
  cpe:2.3:a:redhat:openshift_developer_tools_and_services:-:*:*:*:*:*:*:*
  
  Configuration 36
  cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*
  
  Configuration 37
  cpe:2.3:a:redhat:openshift_api_for_data_protection:-:*:*:*:*:*:*:*
  
  Configuration 38
  cpe:2.3:a:redhat:openshift_virtualization:4:*:*:*:*:*:*:*
  
  Configuration 39
  cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*
  
  Configuration 40
  cpe:2.3:a:redhat:discovery:-:*:*:*:*:*:*:*
  
  Configuration 41
  cpe:2.3:a:redhat:openshift_dev_spaces:-:*:*:*:*:*:*:*
  
  Configuration 42
  cpe:2.3:a:redhat:cert-manager_operator_for_red_hat_openshift:-:*:*:*:*:*:*:*
  
  Configuration 43
  cpe:2.3:a:redhat:keycloak:-:*:*:*:*:*:*:*
  
  Configuration 44
  cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0:*:*:*:*:*:*:*
  
  Configuration 45
  cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
  
  Configuration 46
  cpe:2.3:a:redhat:advanced_cluster_security:4.0:*:*:*:*:*:*:*
  cpe:2.3:a:redhat:advanced_cluster_security:3.0:*:*:*:*:*:*:*
  
  Configuration 47
  cpe:2.3:a:golang:crypto:*:*:*:*:*:*:*:*
  End excluding
  0.17.0
  
  Configuration 48
  cpe:2.3:a:russh_project:russh:*:*:*:*:*:rust:*:*
  End excluding
  0.40.2
  
  Configuration 49
  cpe:2.3:a:sftpgo_project:sftpgo:*:*:*:*:*:*:*:*
  End excluding
  2.5.6
  
  Configuration 50
  cpe:2.3:a:erlang:erlang\/otp:*:*:*:*:*:*:*:*
  End excluding
  26.2.1
  
  Configuration 51
  cpe:2.3:a:matez:jsch:*:*:*:*:*:*:*:*
  End excluding
  0.2.15
  
  Configuration 52
  cpe:2.3:a:libssh2:libssh2:*:*:*:*:*:*:*:*
  End excluding
  1.11.1
  
  Configuration 53
  cpe:2.3:a:asyncssh_project:asyncssh:*:*:*:*:*:*:*:*
  End excluding
  2.14.2
  
  Configuration 54
  cpe:2.3:a:dropbear_ssh_project:dropbear_ssh:*:*:*:*:*:*:*:*
  End excluding
  2022.83
  
  Configuration 55
  cpe:2.3:a:jadaptive:maverick_synergy_java_ssh_api:*:*:*:*:*:*:*:*
  End excluding
  3.1.0-snapshot
  
  Configuration 56
  cpe:2.3:a:ssh:ssh:*:*:*:*:*:*:*:*
  End excluding
  5.11
  
  Configuration 57
  cpe:2.3:o:thorntech:sftp_gateway_firmware:*:*:*:*:*:*:*:*
  End excluding
  3.4.6
  
  Configuration 58
  cpe:2.3:a:netgate:pfsense_plus:*:*:*:*:*:*:*:*
  End including
  23.09.1
  
  Configuration 59
  cpe:2.3:a:netgate:pfsense_ce:*:*:*:*:*:*:*:*
  End including
  2.7.2
  
  Configuration 60
  cpe:2.3:a:crushftp:crushftp:*:*:*:*:*:*:*:*
  End excluding
  10.6.0
  
  Configuration 61
  cpe:2.3:a:connectbot:sshlib:*:*:*:*:*:*:*:*
  End excluding
  2.2.22
  
  Configuration 62
  cpe:2.3:a:apache:sshd:*:*:*:*:*:*:*:*
  End including
  2.11.0
  
  Configuration 63
  cpe:2.3:a:apache:sshj:*:*:*:*:*:*:*:*
  End including
  0.37.0
  
  Configuration 64
  cpe:2.3:a:tinyssh:tinyssh:*:*:*:*:*:*:*:*
  End including
  20230101
  
  Configuration 65
  cpe:2.3:a:trilead:ssh2:6401:*:*:*:*:*:*:*
  
  Configuration 66
  cpe:2.3:a:9bis:kitty:*:*:*:*:*:*:*:*
  End including
  0.76.1.13
  
  Configuration 67
  cpe:2.3:a:gentoo:security:-:*:*:*:*:*:*:*
  Running on/with:
  cpe:2.3:o:debian:debian_linux:-:*:*:*:*:*:*:*
  
  Configuration 68
  cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
  cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
  
  Configuration 69
  cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  
  Configuration 70
  cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
  Start including
  14.0
  End excluding
  14.4

Version: v25.2.1

Vulnerability CVE-2023-48795: Information

Description

Fixed packages

References to Advisories, Solutions, and Tools

Configuration 1

Configuration 2

Configuration 3

Configuration 4

Configuration 5

Configuration 6

Configuration 7

Configuration 8

Configuration 9

Configuration 10

Configuration 11

Configuration 12

Configuration 13

Configuration 14

Configuration 15

Configuration 16

Configuration 17

Configuration 18

Configuration 19

Configuration 20

Configuration 21

Configuration 22

Configuration 23

Configuration 24

Configuration 25

Configuration 26

Configuration 27

Configuration 28

Configuration 29

Configuration 30

Configuration 31

Configuration 32

Configuration 33

Configuration 34

Configuration 35

Configuration 36

Configuration 37

Configuration 38

Configuration 39

Configuration 40

Configuration 41

Configuration 42

Configuration 43

Configuration 44

Configuration 45

Configuration 46

Configuration 47

Configuration 48

Configuration 49

Configuration 50

Configuration 51

Configuration 52

Configuration 53

Configuration 54

Configuration 55

Configuration 56

Configuration 57

Configuration 58

Configuration 59

Configuration 60

Configuration 61

Configuration 62

Configuration 63

Configuration 64

Configuration 65

Configuration 66

Configuration 67

Configuration 68

Configuration 69

Configuration 70