Published: 30/11/2012 Updated: 29/08/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple buffer overflows in libssh prior to 0.5.3 allow remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.

Affected Products

Vendor Product Versions
LibsshLibssh0.4.7, 0.4.8, 0.5.0, 0.5.1, 0.5.2

Vendor Advisories

linssh could be made to crash or run programs if it received specially crafted network traffic ...