libssh libssh 0.6.3 vulnerabilities and exploits

(subscribe to this query)

The RAND_bytes function in libssh prior to 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator (PRNG), which causes the state to be shared between children processes and allows local users to obtain sensitive information...

Libssh Libssh 0.6.1 Libssh Libssh 0.5.5 Libssh Libssh 0.5.3 Libssh Libssh 0.5.4 Libssh Libssh 0.6.0 Libssh Libssh Libssh Libssh 0.5.1 Libssh Libssh 0.5.2 Libssh Libssh 0.4.7 Libssh Libssh 0.4.8 Libssh Libssh 0.5.0

A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem...

Libssh Libssh Fedoraproject Fedora 37 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.

Libssh Libssh Fedoraproject Fedora 37 Debian Debian Linux 10.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux 9.0

The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh prior to 0.6.5 do not properly validate state, which allows remote malicious users to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.

Libssh Libssh Canonical Ubuntu Linux 12.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 14.04 Debian Debian Linux 8.0 Debian Debian Linux 7.0 Fedoraproject Fedora 21 Fedoraproject Fedora 22

1 Github repository

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook