CVE-2023-3603

🗓️ 21 Jul 2023 19:09:44Reported by Debian Security Bug TrackerType

A missing allocation check in sftp server processing read requests may lead to a NULL dereference, potentially causing a DoS attack

Reporter	Title	Published	Views	Family All 23
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to libssh denial of service vulnerability [CVE-2023-3603]	16 Nov 202317:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to libssh denial of service vulnerability [CVE-2023-3603]	31 Jan 202413:29	–	ibm
ATTACKERKB	CVE-2023-3603	21 Jul 202320:15	–	attackerkb
BDU FSTEC	The vulnerability of the libssh library, related to the zero pointer swapping, allows a hacker to trigger a service denial.	29 Sep 202500:00	–	bdu_fstec
CNNVD	libssh 安全漏洞	21 Jul 202300:00	–	cnnvd
CVE	CVE-2023-3603	21 Jul 202319:09	–	cve
Cvelist	CVE-2023-3603 Processing sftp server read may cause null dereference	21 Jul 202319:09	–	cvelist
EUVD	EUVD-2023-44252	3 Oct 202520:07	–	euvd
F5 Networks	K000148483: libssh vulnerabilities CVE-2019-14889 and CVE-2023-3603	11 Nov 202414:18	–	f5
Hacker One	Internet Bug Bounty: Potential NULL dereference in libssh's sftp server	16 Jul 202302:48	–	hackerone

OS	OS Version	Architecture	Package	Filename
Debian	11	any	libssh	libssh_0_any.deb
Debian	12	any	libssh	libssh_0_any.deb
Debian	13	any	libssh	libssh_0_any.deb
Debian	14	any	libssh	libssh_0_any.deb
Debian	999	any	libssh	libssh_0_any.deb

21 Jul 2023 19:09Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.13.1 - 6.5

EPSS0.00767

SSVC