The Terror That Is Terrapin To Ruin Your New Year

Source: Bleeping Computer The Terror That Is Terrapin To Ruin Your New Year

Why Worry, It’s Only 11 Million Servers At Risk

In the distant past of December 2023 we learned about Terrapin, an SSH vulnerability which tore holes in what was one of our last secure communications protocols.  Now that everyone has returned to work, Shadowserver has some news to remind you just how awful this vulnerability could be.  They scanned publicly available IP addresses to determine how many internet facing SSH servers were vulnerable and came up with nearly 11 million possible victims.  That represents just over half of all the servers they ran the test against, giving you an idea of how big this could be if bad actors begin to leverage it.

The good news is that the detection tool is publicly available so you can check your SSH servers to see if you have successfully hardened them.  You don’t need to panic if you are still vulnerable as Terrapin cannot be leveraged unless an attacker already has access to your systems.  There should be enough time to resolve any outstanding patching jobs you need to complete before someone figures out a way to make things worse.  Your first step is to ensure you are protected against prefix truncation attacks, but it may take more patching that than.

Welcome to security in 2024.

It manipulates sequence numbers during the handshake process to compromise the integrity of the SSH channel, particularly when specific encryption modes like ChaCha20-Poly1305 or CBC with Encrypt-then-MAC are used.

Video News

About The Author

Jeremy Hellstrom

Call it,, or PC Perspective, Jeremy has been hanging out and then working with the gang here for years. Apart from the front page you might find him on the BOINC Forums or possibly the Fraggin' Frogs if he has the time.

Leave a reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Latest Podcasts

Archive & Timeline

Previous 12 months
Explore: All The Years!