Lucene search
UbuntuUSN-2145-1HistoryMar 12, 2014 - 12:00 a.m.
libssh vulnerability
2014-03-1200:00:00
ubuntu.com
36
Releases
- Ubuntu 13.10
- Ubuntu 12.10
- Ubuntu 12.04
Packages
- libssh - A tiny C SSH library
Details
Aris Adamantiadis discovered that libssh allowed the OpenSSL PRNG state to
be reused when implementing forking servers. This could allow an attacker
to possibly obtain information about the state of the PRNG and perform
cryptographic attacks.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.10 | noarch | libssh-4 | <Β 0.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libssh-dbg | <Β 0.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libssh-dev | <Β 0.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libssh-4 | <Β 0.5.2-1ubuntu0.12.10.3 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libssh-dbg | <Β 0.5.2-1ubuntu0.12.10.3 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libssh-dev | <Β 0.5.2-1ubuntu0.12.10.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-4 | <Β 0.5.2-1ubuntu0.12.04.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-dbg | <Β 0.5.2-1ubuntu0.12.04.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-dev | <Β 0.5.2-1ubuntu0.12.04.3 | UNKNOWN |
References
Related
openvas
openvas
Debian Security Advisory DSA 2879-1 (libssh - security update)
2014-03-13 00:00:00
Mageia: Security Advisory (MGASA-2014-0119)
2022-01-28 00:00:00
Fedora Update for libssh FEDORA-2014-3473
2014-03-12 00:00:00
nessus
nessus
Fedora 19 : libssh-0.6.3-1.fc19 (2014-3485)
2014-03-17 00:00:00
Mandriva Linux Security Advisory : libssh (MDVSA-2014:053)
2014-03-14 00:00:00
GLSA-201408-03 : LibSSH: Information disclosure
2014-08-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 7 package libssh version 0.6.3-alt1
2014-03-25 00:00:00
Security fix for the ALT Linux 8 package libssh version 0.6.3-alt1
2014-03-25 00:00:00
Security fix for the ALT Linux 9 package libssh version 0.6.3-alt1
2014-03-25 00:00:00
seebug
seebug
LibsshιζΊε·η ηζε¨ζΌζ΄(CVE-2014-0017)
2014-03-07 00:00:00
debiancve
debiancve
CVE-2014-0017
2014-03-14 15:55:00
gentoo
gentoo
LibSSH: Information disclosure
2014-08-10 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: libssh-0.6.3-1.fc20
2014-03-07 06:38:59
[SECURITY] Fedora 19 Update: libssh-0.6.3-1.fc19
2014-03-15 15:21:52
[SECURITY] Fedora 20 Update: libssh-0.6.4-1.fc20
2015-01-03 19:10:54
debian
debian
[SECURITY] [DSA 2879-1] libssh security update
2014-03-13 21:55:59
ubuntucve
ubuntucve
CVE-2014-0017
2014-03-05 00:00:00
osv
osv
libssh - security update
2014-03-13 00:00:00
securityvulns
securityvulns
[USN-2145-1] libssh vulnerability
2014-03-13 00:00:00
libssh PRNG attacks
2014-03-13 00:00:00
cvelist
cvelist
CVE-2014-0017
2014-03-14 15:00:00
cve
cve
CVE-2014-0017
2014-03-14 15:55:00
mageia
mageia
Updated libssh package fixes security vulnerability
2014-03-06 03:17:12
prion
prion
Cross site request forgery (csrf)
2014-03-14 15:55:00
freebsd
freebsd
libssh -- PRNG state reuse on forking servers
2014-03-05 00:00:00
slackware
slackware
[slackware-security] libssh
2015-04-22 01:20:42