Lucene search
OracleLinuxELSA-2022-2031HistoryMay 17, 2022 - 12:00 a.m.
libssh security, bug fix, and enhancement update
2022-05-1700:00:00
linux.oracle.com
52
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
[0.9.6-3]
- Remove STI tests
[0.9.6-2] - Remove bad patch causing errors
- Adding BuildRequires for openssh (SSHD support)
[0.9.6-1] - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
rekeying with different key exchange mechanism - Rebase to version 0.9.6
- Rename SSHD_EXECUTABLE to SSH_EXECUTABLE in tests/torture.c
- Resolves: rhbz#1896651, rhbz#1994600
[0.9.4-4] - Revert previous commit as it is incorrect.
[0.9.6-1] - Fix CVE-2021-3634: Fix possible heap-buffer overflow when
rekeying with different key exchange mechanism (#1978810)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| oracle linux | 8 | src | libssh | < 0.9.6-3.el8 | libssh-0.9.6-3.el8.src.rpm |
| oracle linux | 8 | aarch64 | libssh | < 0.9.6-3.el8 | libssh-0.9.6-3.el8.aarch64.rpm |
| oracle linux | 8 | noarch | libssh-config | < 0.9.6-3.el8 | libssh-config-0.9.6-3.el8.noarch.rpm |
| oracle linux | 8 | aarch64 | libssh-devel | < 0.9.6-3.el8 | libssh-devel-0.9.6-3.el8.aarch64.rpm |
| oracle linux | 8 | src | libssh | < 0.9.6-3.el8 | libssh-0.9.6-3.el8.src.rpm |
| oracle linux | 8 | i686 | libssh | < 0.9.6-3.el8 | libssh-0.9.6-3.el8.i686.rpm |
| oracle linux | 8 | x86_64 | libssh | < 0.9.6-3.el8 | libssh-0.9.6-3.el8.x86_64.rpm |
| oracle linux | 8 | noarch | libssh-config | < 0.9.6-3.el8 | libssh-config-0.9.6-3.el8.noarch.rpm |
| oracle linux | 8 | i686 | libssh-devel | < 0.9.6-3.el8 | libssh-devel-0.9.6-3.el8.i686.rpm |
| oracle linux | 8 | x86_64 | libssh-devel | < 0.9.6-3.el8 | libssh-devel-0.9.6-3.el8.x86_64.rpm |
Related
nessus
nessus
FreeBSD : libssh -- possible heap-buffer overflow vulnerability (57b1ee25-1a7c-11ec-9376-0800272221cc)
2021-10-01 00:00:00
RHEL 8 : libssh (RHSA-2022:2031)
2022-05-11 00:00:00
EulerOS Virtualization 2.9.1 : libssh (EulerOS-SA-2021-2753)
2021-11-17 00:00:00
osv
osv
libssh - security update
2021-08-31 00:00:00
Low: libssh security, bug fix, and enhancement update
2022-05-10 08:14:06
libssh vulnerability
2021-08-26 15:37:38
ibm
ibm
openvas
openvas
Huawei EulerOS: Security Advisory for libssh (EulerOS-SA-2021-2716)
2021-11-12 00:00:00
Huawei EulerOS: Security Advisory for libssh (EulerOS-SA-2021-2787)
2021-11-17 00:00:00
Fedora: Security Advisory for libssh (FEDORA-2021-ec797b6a96)
2021-10-02 00:00:00
cve
cve
CVE-2021-3634
2021-08-31 17:15:00
alpinelinux
alpinelinux
CVE-2021-3634
2021-08-31 17:15:00
altlinux
altlinux
Security fix for the ALT Linux 9 package libssh version 0.9.6-alt1
2021-09-17 00:00:00
veracode
veracode
Denial Of Service
2021-08-27 21:15:50
prion
prion
Design/Logic Flaw
2021-08-31 17:15:00
freebsd
freebsd
libssh -- possible heap-buffer overflow vulnerability
2021-08-26 00:00:00
mageia
mageia
Updated libssh packages fix security vulnerability
2021-09-23 07:49:29
ubuntu
ubuntu
libssh vulnerability
2021-08-26 00:00:00
redhatcve
redhatcve
CVE-2021-3634
2021-08-26 13:32:43
cnvd
cnvd
libssh buffer overflow vulnerability (CNVD-2021-71262)
2021-09-02 00:00:00
almalinux
almalinux
Low: libssh security, bug fix, and enhancement update
2022-05-10 08:14:06
redhat
redhat
(RHSA-2022:2031) Low: libssh security, bug fix, and enhancement update
2022-05-10 08:14:06
(RHSA-2022:5525) Moderate: Service Binding Operator security update
2022-07-07 10:12:50
cbl_mariner
cbl_mariner
CVE-2021-3634 affecting package libssh 0.9.5-2
2024-05-02 09:06:29
fedora
fedora
[SECURITY] Fedora 35 Update: libssh-0.9.6-1.fc35
2021-09-29 00:20:41
[SECURITY] Fedora 34 Update: libssh-0.9.6-1.fc34
2021-09-29 01:10:26
[SECURITY] Fedora 33 Update: libssh-0.9.6-1.fc33
2021-10-07 17:08:12
debian
debian
[SECURITY] [DSA 4965-1] libssh security update
2021-08-31 14:43:51
debiancve
debiancve
CVE-2021-3634
2021-08-31 17:15:00
ubuntucve
ubuntucve
CVE-2021-3634
2021-08-26 00:00:00
rocky
rocky
libssh security, bug fix, and enhancement update
2022-05-10 08:14:06
rosalinux
rosalinux
Advisory ROSA-SA-2024-2333
2024-01-30 08:34:02
gentoo
gentoo
libssh: Multiple Vulnerabilities
2023-12-22 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - January 2022
2022-01-18 00:00:00
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
Related for ELSA-2022-2031