Lucene search
OracleLinuxELSA-2020-4545HistoryNov 10, 2020 - 12:00 a.m.
libssh security, bug fix, and enhancement update
2020-11-1000:00:00
linux.oracle.com
30
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
[0.9.4-2]
- Do not return error when server properly closed the channel (#1849071)
- Add a test for CVE-2019-14889
- Do not parse configuration file in torture_knownhosts test
[0.9.4-1] - Update to version 0.9.4
https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/ - Fixed CVE-2019-14889 (#1781782)
- Fixed CVE-2020-1730 (#1802422)
- Create missing directories in the path provided for known_hosts files (#1733914)
- Removed inclusion of OpenSSH server configuration file from
libssh_server.config (#1821339)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | libssh | < 0.9.4-2.el8 | libssh-0.9.4-2.el8.src.rpm |
| oracle linux | 8 | aarch64 | libssh | < 0.9.4-2.el8 | libssh-0.9.4-2.el8.aarch64.rpm |
| oracle linux | 8 | noarch | libssh-config | < 0.9.4-2.el8 | libssh-config-0.9.4-2.el8.noarch.rpm |
| oracle linux | 8 | aarch64 | libssh-devel | < 0.9.4-2.el8 | libssh-devel-0.9.4-2.el8.aarch64.rpm |
| oracle linux | 8 | src | libssh | < 0.9.4-2.el8 | libssh-0.9.4-2.el8.src.rpm |
| oracle linux | 8 | i686 | libssh | < 0.9.4-2.el8 | libssh-0.9.4-2.el8.i686.rpm |
| oracle linux | 8 | x86_64 | libssh | < 0.9.4-2.el8 | libssh-0.9.4-2.el8.x86_64.rpm |
| oracle linux | 8 | noarch | libssh-config | < 0.9.4-2.el8 | libssh-config-0.9.4-2.el8.noarch.rpm |
| oracle linux | 8 | i686 | libssh-devel | < 0.9.4-2.el8 | libssh-devel-0.9.4-2.el8.i686.rpm |
| oracle linux | 8 | x86_64 | libssh-devel | < 0.9.4-2.el8 | libssh-devel-0.9.4-2.el8.x86_64.rpm |
Related
nessus
nessus
CentOS 8 : libssh (CESA-2020:4545)
2021-02-01 00:00:00
RHEL 8 : libssh (RHSA-2020:4545)
2020-11-04 00:00:00
AlmaLinux 8 : libssh (ALSA-2020:4545)
2022-02-09 00:00:00
rocky
rocky
libssh security, bug fix, and enhancement update
2020-11-03 12:14:19
almalinux
almalinux
Moderate: libssh security, bug fix, and enhancement update
2020-11-03 12:14:19
redhat
redhat
osv
osv
Moderate: libssh security, bug fix, and enhancement update
2020-11-03 12:14:19
CVE-2019-14889
2019-12-10 23:15:10
libssh - security update
2019-12-17 00:00:00
openvas
openvas
openSUSE: Security Advisory for libssh (openSUSE-SU-2020:0102_1)
2020-01-27 00:00:00
Ubuntu Update for libssh USN-4219-1
2019-12-11 00:00:00
Fedora Update for libssh FEDORA-2019-46b6bd2459
2020-01-08 00:00:00
suse
suse
Security update for libssh (important)
2020-01-25 00:00:00
Security update for libssh (important)
2019-12-17 00:00:00
Security update for libssh (moderate)
2020-04-12 00:00:00
ubuntucve
ubuntucve
CVE-2019-14889
2019-12-10 00:00:00
CVE-2020-1730
2020-04-09 00:00:00
mageia
mageia
Updated libssh packages fix security vulnerability
2019-12-19 16:44:26
Updated libssh packages fix security vulnerability
2020-04-15 13:12:14
alpinelinux
alpinelinux
CVE-2019-14889
2019-12-10 23:15:00
CVE-2020-1730
2020-04-13 19:15:00
debian
debian
[SECURITY] [DLA 2038-1] libssh security update
2019-12-17 12:42:41
[SECURITY] [DLA 3437-1] libssh security update
2023-05-29 22:01:33
altlinux
altlinux
Security fix for the ALT Linux 8 package libssh version 0.8.8-alt1
2020-03-13 00:00:00
Security fix for the ALT Linux 9 package libssh version 0.9.3-alt1
2019-12-14 00:00:00
fedora
fedora
[SECURITY] Fedora 31 Update: libssh-0.9.3-1.fc31
2019-12-18 01:56:36
[SECURITY] Fedora 30 Update: libssh-0.9.3-1.fc30
2020-01-03 20:36:26
[SECURITY] Fedora 32 Update: libssh-0.9.4-2.fc32
2020-04-28 02:33:33
gentoo
gentoo
libssh: Arbitrary command execution
2020-03-15 00:00:00
libssh: Denial of service
2020-04-10 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-12-11 04:07:33
Denial Of Service (DoS)
2020-08-06 21:36:13
redhatcve
redhatcve
CVE-2019-14889
2020-04-07 17:03:58
CVE-2020-1730
2020-04-09 11:15:24
freebsd
freebsd
Client/server denial of service when handling AES-CTR ciphers
2020-01-25 00:00:00
ubuntu
ubuntu
libssh vulnerability
2019-12-10 00:00:00
libssh vulnerability
2020-04-09 00:00:00
prion
prion
Command injection
2019-12-10 23:15:00
Design/Logic Flaw
2020-04-13 19:15:00
cve
cve
CVE-2019-14889
2019-12-10 23:15:00
CVE-2020-1730
2020-04-13 19:15:00
debiancve
debiancve
CVE-2019-14889
2019-12-10 23:15:00
CVE-2020-1730
2020-04-13 19:15:00
ibm
ibm
archlinux
archlinux
[ASA-202004-11] libssh: denial of service
2020-04-09 00:00:00
f5
f5
K05295501 : libssh vulnerability CVE-2020-1730
2020-07-14 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2020
2020-04-14 00:00:00
Oracle Critical Patch Update Advisory - October 2020
2020-10-20 00:00:00
8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related for ELSA-2020-4545