CVE-2013-4548: The mm_newkeys_from_blob function in monitor_wrap.c in sshd in OpenSSH 6.2 and 6.3, when an AES-GCM cipher...

Security readout for executives and security teams

This flaw affects OpenSSH sshd 6.2 and 6.3 when AES-GCM is used. An already-authenticated remote user may bypass restrictions intended to confine their session, such as ForceCommand or restricted login shells. It is most urgent where SSH accounts are deliberately constrained for automation, file transfer, bastion, or partner access. Exposure is limited to OpenSSH 6.2 or 6.3 sshd deployments using AES-GCM ciphers, especially systems relying on ForceCommand or restricted shells. The bundle does not provide CPEs, CVSS, or a complete product matrix. Treat this as a targeted access-control risk. Patch promptly on systems where SSH users are intentionally restricted, especially externally reachable servers and shared administration entry points. Mitigation focus: Update OpenSSH through your operating system vendor advisory channel.; Prioritize SSH bastions and hosts with restricted or automation-only accounts.; Review OpenSSH and vendor guidance for AES-GCM configuration workarounds..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.