PT-2022-19493 · Ssh.Net · Ssh.Net

Yaumn-Synacktiv · Published 2022-05-31 · Updated 2022-06-14 · CVE-2022-29245

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SSH.NET versions 2020.0.0 through 2020.0.1

Description The issue arises during an X25519 key exchange, where the client's private key is generated with System.Random, which is not a cryptographically secure random number generator. This allows an attacker who can eavesdrop on the communications to decrypt them.

Recommendations For versions 2020.0.0 and 2020.0.1, update to version 2020.0.2 to resolve the issue. As a temporary workaround, consider disabling support for curve25519-sha256 and [e-mail] key exchange algorithms.

Exploit

Fix

Use of Insufficiently Random Values

Weakness Enumeration

CWE-338

CWE-330

Related Identifiers

CVE-2022-29245

GHSA-72P8-V4HG-V45P

Affected Products

Ssh.Net

References · 12

• 🔥 https://github.com/sshnet/SSH.NET/security/advisories/GHSA-72p8-v4hg-v45p · Exploit
• 🔥 https://github.com/sshnet/SSH.NET/blob/bc99ada7da3f05f50d9379f2644941d91d5bf05a/src/Renci.SshNet/Security/KeyExchangeECCurve25519.cs#L51 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/29xxx/CVE-2022-29245.json · Exploit
• https://github.com/sshnet/SSH.NET/commit/03c6d60736b8f7b42e44d6989a53f9b644a091fb · Patch
• https://osv.dev/vulnerability/CVE-2022-29245 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-72p8-v4hg-v45p · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-29245 · Security Note
• https://github.com/sshnet/SSH.NET/commit/f1f273cf349532b9d41c1de51d3b83a9accedc88 · Note
• https://github.com/sshnet/SSH.NET · Note
• https://github.com/sshnet/SSH.NET/releases/tag/2020.0.2 · Note
• https://t.me/cibsecurity/43573 · Telegram Post
• https://t.me/cvenotify/30920 · Telegram Post