Lucene search

K
nvd[email protected]NVD:CVE-2015-1782
HistoryMar 13, 2015 - 2:59 p.m.

CVE-2015-1782

2015-03-1314:59:00
CWE-20
web.nvd.nist.gov
5

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.006

Percentile

78.7%

The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.

Affected configurations

Nvd
Node
debiandebian_linuxMatch7.0
Node
libssh2libssh2Range1.4.3
Node
fedoraprojectfedoraMatch20
OR
fedoraprojectfedoraMatch21
OR
fedoraprojectfedoraMatch22

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.5

Confidence

High

EPSS

0.006

Percentile

78.7%