Security update for libssh

This update for libssh fixes the following issues: CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375. CVE-2025-8114: NULL pointer dereference when an allocation error happens during the...

OESA-2025-2342 libssh security update

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote...

SUSE-SU-2025:03368-1 Security update for libssh

This update for libssh fixes the following issues: - CVE-2025-8277: memory exhaustion leading to client-side DoS due to improper memory management when KEX process is repeated with incorrect guesses bsc1249375. - CVE-2025-8114: NULL pointer dereference when an allocation error happens during the...

Fedora 41 : libssh (2025-88ec28aaee)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-88ec28aaee advisory. New upstream release fixing the following security weaknesses CVE-2025-8114, CVE-2025-8277 Tenable has extracted the preceding description block...

CVE-2025-8277

creationtimestamp| type| source ---|---|--- 2025-09-19 18:51:31+00:00| seen| https://gist.github.com/EbonJaeger/2ba8ad95fbe2fa2ac2e44b74f6abfe47 2026-02-23 23:26:31+00:00| seen| https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mfksgv64dgk2 2026-03-19 00:00:00+00:00| seen|...

Fedora 43 : libssh (2025-50a98965b5)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-50a98965b5 advisory. New upstream release fixing the following security weaknesses CVE-2025-8114, CVE-2025-8277 Tenable has extracted the preceding description block...

libssh-config-0.11.3-1.1 on GA media (moderate)

libssh-config-0.11.3-1.1 on GA media Announcement ID: openSUSE-SU-2025:15545-1 Rating: moderate Cross-References: CVE-2025-8114 CVE-2025-8277 CVSS scores: CVE-2025-8114 SUSE : 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2025-8114 SUSE : 5.7...

Fedora: Security Advisory (FEDORA-2025-9826857157)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Linux Distros Unpatched Vulnerability : CVE-2025-8277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory durin...

CVE-2025-8277

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

MAL-2025-8277 Malicious code in @landmineaknpm2/nesciunt-sunt-libero (npm)

The package @landmineaknpm2/nesciunt-sunt-libero was found to contain malicious code...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Villatheme Woocommerce_Photo_Reviews

CVE-2024-8277 - Authentication Bypass in WooCommerce Photo Revie...

CVE-2024-8277

creationtimestamp| type| source ---|---|--- 2024-09-11 11:59:39+00:00| seen| https://t.me/cvedetector/5340 2024-09-11 20:12:24+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8511...

WordPress WooCommerce Photo Reviews - Review Reminders - Review for Discounts Plugin <= 1.3.13.2 is vulnerable to Broken Authentication

Software WooCommerce Photo Reviews - Review Reminders - Review for Discounts Type Plugin Vulnerable versions = 1.3.13.2 Fixed in 1.3.14 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-8277 Patch priority High CVSS severity High 9.8...

CVE-2020-8277 affecting package python-gevent for versions less than 21.1.2-3

CVE-2020-8277 affecting package python-gevent for versions less than 21.1.2-3. A patched version of the package is available...

Rockwell FactoryTalk Activation Manager < 4.02 Buffer Overflow

The version of Rockwell FactoryTalk Activation Manager installed on the remote Windows host is prior to 4.02. It is, therefore, affected by a vulnerability. - A custom string copying function of the license server manager in FlexNet Publisher does not use proper bounds checking on incoming data,...

Rocky Linux 8 : nodejs:12 (RLSA-2020:5499)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2020:5499 advisory. - An issue was discovered in ajv.validate in Ajv aka Another JSON Schema Validator 6.12.2. A carefully crafted JSON schema could be provided that allows...

Rocky Linux 8 : nodejs:14 (RLSA-2021:0551)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:0551 advisory. - An issue was discovered in ajv.validate in Ajv aka Another JSON Schema Validator 6.12.2. A carefully crafted JSON schema could be provided that allows...

BELL-CVE-2020-8277 CVE-2020-8277 does not affect BellSoft software

Bulletin has no description...

K07944249: Node.js vulnerability CVE-2020-8277

Security Advisory Description A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions 15.2.1, 14.15.1, and 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is...