libssh libssh - vulnerabilities and exploits

(subscribe to this query)

NA

A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an malicious user to inject malicious code into the command of the features mentioned through the hostname parameter.

Libssh Libssh Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Fedoraproject Fedora 38

NA

A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or...

Libssh Libssh Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0 Fedoraproject Fedora 38 Fedoraproject Fedora 39

NA

In ssh in OpenSSH prior to 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is referenced by an expansion token in certain situations. For example, an untrusted Git repository can have a submodule with shell metacharacters ...

Openbsd Openssh Debian Debian Linux 10.0 Debian Debian Linux 11.0 Debian Debian Linux 12.0

14 Github repositories

NA

A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up to 4GB SFTP reads, causing allocation of up to 4GB buffers, which was not being checked for failure. This will likely cras...

Libssh Libssh -

NA

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.

Libssh Libssh Fedoraproject Fedora 37 Debian Debian Linux 10.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

NA

A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem...

Libssh Libssh Fedoraproject Fedora 37 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

4

CVSSv2

A flaw has been found in libssh in versions before 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secret_hash and the other session_id. Initially, both of them are the same, but after key re-exchange, previous s...

Libssh Libssh Redhat Virtualization 4.0 Redhat Enterprise Linux 8.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Oracle Mysql Workbench Netapp Cloud Backup -

4.3

CVSSv2

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

Libssh Libssh 0.9.4 Debian Debian Linux 9.0 Fedoraproject Fedora 32 Fedoraproject Fedora 33 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Canonical Ubuntu Linux 16.04 Oracle Communications Cloud Native Core Policy 1.15.0

5

CVSSv2

A flaw was found in libssh versions prior to 0.8.9 and prior to 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closin...

Libssh Libssh Canonical Ubuntu Linux 18.04 Netapp Cloud Backup -Redhat Enterprise Linux 8.0 Canonical Ubuntu Linux 19.10 Fedoraproject Fedora 31 Fedoraproject Fedora 32 Oracle Mysql Workbench

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook