Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2024:0538
HistoryJan 29, 2024 - 8:02 a.m.

(RHSA-2024:0538) Moderate: libssh security update

2024-01-2908:02:58
access.redhat.com
17
libssh
security update
ssh protocol
algorithm guessing
authorization bypass
prefix truncation attack
cvss score
unix

7.3 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

JSON

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

  • libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)

  • libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283)

  • ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64libssh-devel< 0.9.6-4.el8_6libssh-devel-0.9.6-4.el8_6.x86_64.rpm
RedHat8x86_64libssh-debugsource< 0.9.6-4.el8_6libssh-debugsource-0.9.6-4.el8_6.x86_64.rpm
RedHat8aarch64libssh-devel< 0.9.6-4.el8_6libssh-devel-0.9.6-4.el8_6.aarch64.rpm
RedHat8s390xlibssh< 0.9.6-4.el8_6libssh-0.9.6-4.el8_6.s390x.rpm
RedHat8i686libssh-debugsource< 0.9.6-4.el8_6libssh-debugsource-0.9.6-4.el8_6.i686.rpm
RedHat8x86_64libssh-debuginfo< 0.9.6-4.el8_6libssh-debuginfo-0.9.6-4.el8_6.x86_64.rpm
RedHat8ppc64lelibssh< 0.9.6-4.el8_6libssh-0.9.6-4.el8_6.ppc64le.rpm
RedHat8s390xlibssh-devel< 0.9.6-4.el8_6libssh-devel-0.9.6-4.el8_6.s390x.rpm
RedHat8i686libssh-debuginfo< 0.9.6-4.el8_6libssh-debuginfo-0.9.6-4.el8_6.i686.rpm
RedHat8ppc64lelibssh-debuginfo< 0.9.6-4.el8_6libssh-debuginfo-0.9.6-4.el8_6.ppc64le.rpm
Rows per page:
1-10 of 211

Related

nessus 70
osv 11
redhat 5
openvas 44
fedora 4
slackware 1
mageia 4
rocky 1
ibm 9
oraclelinux 4
cloudfoundry 1
ubuntu 2
debian 3
almalinux 3
redos 2
rosalinux 1
gentoo 1
nvd 3
redhatcve 2
ubuntucve 3
photon 1
cve 2
prion 2
veracode 2
cvelist 2
debiancve 3
f5 2
freebsd_advisory 1
cbl_mariner 5
amazon 1
freebsd 1
hackerone 1
cgr 1
thn 1
nessus
nessus
RHEL 8 : libssh (RHSA-2024:0538)
2024-01-29 00:00:00
Oracle Linux 8 : libssh (ELSA-2023-3839)
2023-06-29 00:00:00
EulerOS Virtualization 2.10.1 : libssh (EulerOS-SA-2023-2542)
2023-08-02 00:00:00
osv
osv
libssh - security update
2023-05-23 00:00:00
Moderate: libssh security update
2023-11-07 00:00:00
Moderate: libssh security update
2023-07-08 02:54:11
redhat
redhat
(RHSA-2023:3839) Moderate: libssh security update
2023-06-27 13:35:53
(RHSA-2023:6643) Moderate: libssh security update
2023-11-07 06:10:49
(RHSA-2023:4276) Moderate: DevWorkspace Operator Security Update
2023-07-25 18:29:37
openvas
openvas
Debian: Security Advisory (DSA-5409-1)
2023-05-25 00:00:00
Huawei EulerOS: Security Advisory for libssh (EulerOS-SA-2023-2561)
2023-08-03 00:00:00
Huawei EulerOS: Security Advisory for libssh (EulerOS-SA-2023-2358)
2023-07-17 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: libssh-0.10.5-1.fc37
2023-05-28 02:56:47
[SECURITY] Fedora 38 Update: libssh-0.10.5-1.fc38
2023-05-14 01:39:52
[SECURITY] Fedora 38 Update: putty-0.80-1.fc38
2024-01-11 02:17:03
slackware
slackware
[slackware-security] libssh
2023-05-04 19:11:18
mageia
mageia
Updated libssh packages fix security vulnerability
2023-05-21 11:42:44
Updated proftpd packages fix a security vulnerability
2023-12-29 20:16:34
Updated putty package fixes a security vulnerability (Terrapin attack)
2024-01-08 13:12:44
rocky
rocky
libssh security update
2023-07-08 02:54:11
ibm
ibm
Security Bulletin: Vulnerabilities in libssh library (CVE-2023-1667, CVE-2023-2283 ) affect Power HMC
2024-04-16 16:54:11
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to denial of service and security restriction bypass due to [CVE-2023-2283], [CVE-2023-1667]
2023-07-27 15:40:30
Security Bulletin: Vulnerabilities in Linux components affect IBM SAN Volume Controller, IBM Storwize, IBM Spectrum Virtualize and IBM FlashSystem products
2024-06-19 17:53:41
oraclelinux
oraclelinux
libssh security update
2023-06-29 00:00:00
libssh security update
2023-11-11 00:00:00
libssh security update
2024-02-01 00:00:00
cloudfoundry
cloudfoundry
USN-6138-1: libssh vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
ubuntu
ubuntu
libssh vulnerabilities
2023-06-05 00:00:00
Paramiko vulnerability
2024-01-25 00:00:00
debian
debian
[SECURITY] [DSA 5409-1] libssh security update
2023-05-23 11:50:46
[SECURITY] [DLA 3730-1] python-asyncssh security update
2024-02-01 00:13:38
[SECURITY] [DLA 3718-1] php-phpseclib security update
2024-01-25 02:26:07
almalinux
almalinux
Moderate: libssh security update
2023-06-27 00:00:00
Moderate: libssh security update
2023-11-07 00:00:00
Moderate: libssh security update
2024-01-31 00:00:00
redos
redos
ROS-20240329-18
2024-03-29 00:00:00
ROS-20240409-04
2024-04-09 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2333
2024-01-30 08:34:02
gentoo
gentoo
libssh: Multiple Vulnerabilities
2023-12-22 00:00:00
nvd
nvd
CVE-2023-2283
2023-05-26 18:15:13
CVE-2023-1667
2023-05-26 18:15:10
CVE-2023-48795
2023-12-18 16:15:10
redhatcve
redhatcve
CVE-2023-2283
2023-05-08 05:21:31
CVE-2023-1667
2023-05-08 04:52:00
ubuntucve
ubuntucve
CVE-2023-2283
2023-05-09 00:00:00
CVE-2023-1667
2023-05-09 00:00:00
CVE-2023-48795
2023-12-18 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0466
2023-09-07 00:00:00
cve
cve
CVE-2023-2283
2023-05-26 18:15:13
CVE-2023-1667
2023-05-26 18:15:10
prion
prion
Authentication flaw
2023-05-26 18:15:00
Null pointer dereference
2023-05-26 18:15:00
veracode
veracode
Authorization Bypass
2023-05-21 11:53:42
Denial Of Services (DoS)
2023-05-21 16:19:18
cvelist
cvelist
CVE-2023-1667
2023-05-26 00:00:00
CVE-2023-2283
2023-05-26 00:00:00
debiancve
debiancve
CVE-2023-2283
2023-05-26 18:15:13
CVE-2023-48795
2023-12-18 16:15:10
CVE-2023-1667
2023-05-26 18:15:10
f5
f5
K000138682 : libssh vulnerability CVE-2023-2283
2024-02-24 00:00:00
K000138264 : SSH vulnerability CVE-2023-48795
2024-01-17 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-23:19.openssh
2023-12-19 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package libssh2 for versions less than 1.9.0-4
2024-02-25 03:00:06
CVE-2023-48795 affecting package moby-compose for versions less than 2.17.3-5
2024-06-12 22:23:00
CVE-2023-48795 affecting package cri-o for versions less than 1.30.1-1
2024-06-21 09:32:44
amazon
amazon
Medium: openssh
2023-12-18 09:20:00
freebsd
freebsd
FreeBSD -- Prefix Truncation Attack in the SSH protocol
2023-12-19 00:00:00
hackerone
hackerone
Nextcloud: Weak ssh algorithms and CVE-2023-48795 Discovered on various subdomains of nextcloud.com
2024-04-04 01:18:35
cgr
cgr
CVE-2023-48795 vulnerabilities
2024-05-19 03:07:16
thn
thn
New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security
2024-01-01 09:37:00

7.3 High

AI Score

Confidence

Low

0.963 High

EPSS

Percentile

99.5%

JSON
Related for RHSA-2024:0538
nessus70osv11redhat5openvas44fedora4slackware1mageia4rocky1ibm9oraclelinux4cloudfoundry1ubuntu2debian3almalinux3redos2rosalinux1gentoo1nvd3redhatcve2ubuntucve3photon1cve2prion2veracode2cvelist2debiancve3f52freebsd_advisory1cbl_mariner5amazon1freebsd1hackerone1cgr1thn1