Lucene search

K
osvGoogleOSV:USN-6138-1
HistoryJun 05, 2023 - 2:08 p.m.

libssh vulnerabilities

2023-06-0514:08:01
Google
osv.dev
7
libssh
rekeying
signature verification
remote code execution
denial of service
cve-2023-1667
cve-2023-2283

7.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.5%

Philip Turnbull discovered that libssh incorrectly handled rekeying with
algorithm guessing. A remote attacker could use this issue to cause libssh
to crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2023-1667)

Kevin Backhouse discovered that libssh incorrectly handled verifying data
signatures. A remote attacker could possibly use this issue to bypass
authorization. (CVE-2023-2283)