Lucene search

K
freebsdFreeBSD9770D6AC-614D-11E5-B379-14DAE9D210B8
HistoryJan 25, 2015 - 12:00 a.m.

libssh2 -- denial of service vulnerability

2015-01-2500:00:00
vuxml.freebsd.org
12

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.4%

Mariusz Ziulek reports:

A malicious attacker could man in the middle a real server
and cause libssh2 using clients to crash (denial of service) or
otherwise read and use completely unintended memory areas in this
process.

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchlibssh2< 1.5.0,2UNKNOWN

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

78.4%