Lucene search

CVE-2023-1667

🗓️ 26 May 2023 18:10:15Reported by redhatType

NULL pointer dereference in libssh during re-keying causing denial of service

Reporter	Title	Published	Views	Family All 157
UbuntuCve	CVE-2023-1667	9 May 202300:00	–	ubuntucve
Veracode	Denial Of Services (DoS)	21 May 202316:19	–	veracode
Prion	Null pointer dereference	26 May 202318:15	–	prion
RedhatCVE	CVE-2023-1667	8 May 202304:52	–	redhatcve
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to libssh denial of service vulnerabilitiy [ CVE-2023-1667]	30 Jan 202420:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service and security restriction bypass due to [CVE-2023-2283], [CVE-2023-1667]	27 Jul 202315:40	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in libssh library (CVE-2023-1667, CVE-2023-2283 ) affect Power HMC	16 Apr 202416:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Linux components affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products	19 Jun 202417:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple CVEs may affect Operating System packages shipped with IBM CICS TX Advanced 10.1	4 Sep 202311:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from openssl-libs, libssh, libarchive, sqlite and go-toolset	1 Aug 202306:33	–	ibm

Nvd

Vulners

Node

libssh libsshRange0.9.1–0.9.6

libssh libsshRange0.10.0–0.10.4

Node

fedoraproject fedoraMatch37

Node

debian debian_linuxMatch10.0

Node

redhat enterprise_linuxMatch8.0

redhat enterprise_linuxMatch9.0

[
  {
    "vendor": "n/a",
    "product": "libssh",
    "versions": [
      {
        "version": "libssh-2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27PD44ALQTZXX7K6JAM3BXBUHYA6DFFN/
lists	www.lists.debian.org/debian-lts-announce/2023/05/msg00029.html
access	www.access.redhat.com/security/cve/CVE-2023-1667
security	www.security.gentoo.org/glsa/202312-05
libssh	www.libssh.org/security/advisories/CVE-2023-1667.txt

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 May 2023 18:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS36.5

EPSS0.002

CWE-476