writeups.xyz / Terrapin Attack

Submitter : c2a

Date: 18 December 2023

Bounty : undisclosed

Vulnerabilities :

• Downgrade Attack
• MiTM
• Prefix Truncation Attack
• Cryptographic Issues

Programs :

• OpenSSH
• AsyncSSH

Authors :

• Fabian Bäumer (@TrueSkrillor)
• Marcus Brinkmann (@Lambdafu)
• Jörg Schwenk (@JoergSchwenk)

Link :
https://terrapin-attack.com