Lucene search

K
mageiaGentoo FoundationMGASA-2023-0184
HistoryMay 21, 2023 - 11:42 a.m.

Updated libssh packages fix security vulnerability

2023-05-2111:42:44
Gentoo Foundation
advisories.mageia.org
25
libssh
security
vulnerability
null dereference
rekeying
algorithm guessing
cve-2023-1667
authorization bypass
pki_verify_data_signature
cve-2023-2283
unix

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

48.7%

Potential NULL dereference during rekeying with algorithm guessing. (CVE-2023-1667) Authorization bypass in pki_verify_data_signature. (CVE-2023-2283

OSVersionArchitecturePackageVersionFilename
Mageia8noarchlibssh< 0.9.7-1libssh-0.9.7-1.mga8

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

48.7%