Lucene search
RedHatRHSA-2024:0538HistoryJan 29, 2024 - 8:02 a.m.
(RHSA-2024:0538) Moderate: libssh security update
2024-01-2908:02:58
access.redhat.com
23
libssh
security update
ssh protocol
algorithm guessing
authorization bypass
prefix truncation attack
cvss score
unix
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7.3
Confidence
Low
EPSS
0.965
Percentile
99.6%
libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.
Security Fix(es):
-
libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)
-
libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283)
-
ssh: Prefix truncation attack on Binary Packet Protocol (BPP) (CVE-2023-48795)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | i686 | libssh-debuginfo | < 0.9.6-4.el8_6 | libssh-debuginfo-0.9.6-4.el8_6.i686.rpm |
| RedHat | 8 | s390x | libssh | < 0.9.6-4.el8_6 | libssh-0.9.6-4.el8_6.s390x.rpm |
| RedHat | 8 | noarch | libssh-config | < 0.9.6-4.el8_6 | libssh-config-0.9.6-4.el8_6.noarch.rpm |
| RedHat | 8 | aarch64 | libssh-devel | < 0.9.6-4.el8_6 | libssh-devel-0.9.6-4.el8_6.aarch64.rpm |
| RedHat | 8 | aarch64 | libssh | < 0.9.6-4.el8_6 | libssh-0.9.6-4.el8_6.aarch64.rpm |
| RedHat | 8 | s390x | libssh-devel | < 0.9.6-4.el8_6 | libssh-devel-0.9.6-4.el8_6.s390x.rpm |
| RedHat | 8 | s390x | libssh-debugsource | < 0.9.6-4.el8_6 | libssh-debugsource-0.9.6-4.el8_6.s390x.rpm |
| RedHat | 8 | x86_64 | libssh-debugsource | < 0.9.6-4.el8_6 | libssh-debugsource-0.9.6-4.el8_6.x86_64.rpm |
| RedHat | 8 | ppc64le | libssh-debuginfo | < 0.9.6-4.el8_6 | libssh-debuginfo-0.9.6-4.el8_6.ppc64le.rpm |
| RedHat | 8 | i686 | libssh-debugsource | < 0.9.6-4.el8_6 | libssh-debugsource-0.9.6-4.el8_6.i686.rpm |
Related
nessus
nessus
RHEL 8 : libssh (RHSA-2024:0538)
2024-01-29 00:00:00
EulerOS Virtualization 2.10.1 : libssh (EulerOS-SA-2023-2542)
2023-08-02 00:00:00
Photon OS 4.0: Libssh PHSA-2023-4.0-0466
2024-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 38 Update: libssh-0.10.5-1.fc38
2023-05-14 01:39:52
[SECURITY] Fedora 37 Update: libssh-0.10.5-1.fc37
2023-05-28 02:56:47
[SECURITY] Fedora 39 Update: putty-0.80-1.fc39
2024-01-11 01:17:14
osv
osv
Moderate: libssh security update
2023-06-27 00:00:00
Moderate: libssh security update
2023-11-07 00:00:00
libssh - security update
2023-05-23 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5409-1)
2023-05-25 00:00:00
Huawei EulerOS: Security Advisory for libssh (EulerOS-SA-2023-2561)
2023-08-03 00:00:00
Ubuntu: Security Advisory (USN-6138-1)
2023-06-06 00:00:00
redhat
redhat
(RHSA-2023:3839) Moderate: libssh security update
2023-06-27 13:35:53
(RHSA-2023:6643) Moderate: libssh security update
2023-11-07 06:10:49
(RHSA-2023:4276) Moderate: DevWorkspace Operator Security Update
2023-07-25 18:29:37
ubuntu
ubuntu
libssh vulnerabilities
2023-06-05 00:00:00
LXD vulnerability
2024-04-22 00:00:00
libssh2 vulnerability
2024-01-15 00:00:00
ibm
ibm
mageia
mageia
Updated libssh packages fix security vulnerability
2023-05-21 11:42:44
Updated erlang packages fix a security vulnerability (Terrapin Attack)
2024-01-20 01:43:32
rocky
rocky
libssh security update
2023-07-08 02:54:11
slackware
slackware
[slackware-security] libssh
2023-05-04 19:11:18
oraclelinux
oraclelinux
libssh security update
2023-11-11 00:00:00
libssh security update
2023-06-29 00:00:00
openssh security update
2024-03-18 00:00:00
almalinux
almalinux
Moderate: libssh security update
2023-11-07 00:00:00
Moderate: libssh security update
2023-06-27 00:00:00
redos
redos
ROS-20240329-18
2024-03-29 00:00:00
ROS-20240408-15
2024-04-08 00:00:00
debian
debian
[SECURITY] [DSA 5409-1] libssh security update
2023-05-23 11:50:46
[SECURITY] [DSA 5600-1] php-phpseclib security update
2024-01-12 07:13:37
cloudfoundry
cloudfoundry
USN-6138-1: libssh vulnerabilities | Cloud Foundry
2023-06-30 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2024-2333
2024-01-30 08:34:02
gentoo
gentoo
libssh: Multiple Vulnerabilities
2023-12-22 00:00:00
ubuntucve
ubuntucve
CVE-2023-2283
2023-05-09 00:00:00
CVE-2023-1667
2023-05-09 00:00:00
redhatcve
redhatcve
CVE-2023-2283
2023-05-08 05:21:31
CVE-2023-1667
2023-05-08 04:52:00
nvd
nvd
CVE-2023-2283
2023-05-26 18:15:13
CVE-2023-1667
2023-05-26 18:15:10
debiancve
debiancve
CVE-2023-2283
2023-05-26 18:15:13
CVE-2023-1667
2023-05-26 18:15:10
cvelist
cvelist
CVE-2023-2283
2023-05-26 00:00:00
CVE-2023-1667
2023-05-26 00:00:00
f5
f5
K000138682 : libssh vulnerability CVE-2023-2283
2024-02-24 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0466
2023-09-07 00:00:00
prion
prion
Authentication flaw
2023-05-26 18:15:00
Null pointer dereference
2023-05-26 18:15:00
veracode
veracode
Authorization Bypass
2023-05-21 11:53:42
Denial Of Services (DoS)
2023-05-21 16:19:18
cve
cve
CVE-2023-2283
2023-05-26 18:15:13
CVE-2023-1667
2023-05-26 18:15:10
cbl_mariner
cbl_mariner
CVE-2023-48795 affecting package libssh for versions less than 0.10.6-1
2024-01-14 22:46:30
CVE-2023-48795 affecting package moby-cli for versions less than 20.10.27-2
2024-01-19 03:54:24
alpinelinux
alpinelinux
CVE-2023-48795
2023-12-18 16:15:10
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
AI Score
7.3
Confidence
Low
EPSS
0.965
Percentile
99.6%
Related for RHSA-2024:0538