New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security

Security researchers from Ruhr University Bochum have discovered a vulnerability in the Secure Shell (SSH) cryptographic network protocol that could allow an attacker to downgrade the connection's security by breaking the integrity of the secure channel.
Called Terrapin (CVE-2023-48795, CVSS score: 5.9), the exploit has been described as the "first ever practically exploitable prefix

attacker attackers breaking called channel cryptographic cve cve-2023-48795 cvss cvss score exploit flaw integrity network protocol protocol security researchers ruhr university bochum score security security researchers shell ssh ssh protocol terrapin university vulnerability