Tag

prefix-truncation

Safeguard articles tagged "prefix-truncation" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

Terrapin Attack (CVE-2023-48795) Explained: SSH's Prefix Truncation Flaw

CVE-2023-48795, the Terrapin attack, is a protocol-level flaw letting a MITM silently truncate the start of an SSH session. Here is how it works, what it downgrades, and how to fix it.

Jul 8, 20267 min read