Lucene search

K
archlinuxArch LinuxASA-201501-12
HistoryJan 19, 2015 - 12:00 a.m.

libssh: denial of service

2015-01-1900:00:00
Arch Linux
lists.archlinux.org
20

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.17 Low

EPSS

Percentile

95.5%

It was discovered that a double free vulnerability in the
ssh_packet_kexinit function in kex.c allows remote attackers to cause a
denial of service via a crafted kexinit packet.

OSVersionArchitecturePackageVersionFilename
anyanyanylibssh< 0.6.4-1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.17 Low

EPSS

Percentile

95.5%