UBUNTU-CVE-2025-8277

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

CVE-2025-8277

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

CVE-2025-8277

CVE-2025-8277 is a libssh issue where the KEX memory is not freed during repeated incorrect KEX guesses, causing a memory leak that can crash the client. Connected sources confirm this vulnerability and note fixes/newer releases. Affected versions include libssh prior to the patched line (e.g., u...

CVE-2025-8277 Libssh: memory exhaustion via repeated key exchange in libssh

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

CVE-2025-8277 Libssh: memory exhaustion via repeated key exchange in libssh

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

CVE-2025-8277

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

CVE-2025-8277

A flaw was found in libssh's handling of key exchange KEX processes when a client repeatedly sends incorrect KEX guesses. The library fails to free memory during these rekey operations, which can gradually exhaust system memory. This issue can lead to crashes on the client side, particularly when...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the key exchange process. An attacker can cause gradual memory exhaustion and potential application crashes by repeatedly initiating key exchanges with incorrect guesses as an...

libssh 安全漏洞

libssh is a C development package from the libssh organization for accessing SSH services, which is capable of executing remote commands, file transfers, as well as providing a secure transport channel for remote programs. A security vulnerability exists in libssh that stems from memory not being...

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime via the key exchange process. An attacker can cause gradual memory exhaustion and potential application crashes by repeatedly initiating key exchanges with incorrect guesses as an...

: null pointer dereference in libssh kex session id calculation

...

Before Go 1.20, the RSA based key exchange methods in crypto/tls may exhibit a timing side channel

...

Linux Distros Unpatched Vulnerability : CVE-2024-38528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nptd-rs is a tool for synchronizing your computer's clock, implementing the NTP and NTS protocols. There is a missing limit for accepted NTS-KE connections. Thi...

Linux Distros Unpatched Vulnerability : CVE-2017-13099

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wolfSSL prior to version 3.12.2 provides a weak Bleichenbacher oracle when any TLS cipher suite using RSA key exchange is negotiated. An attacker can recover th...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

Linux Distros Unpatched Vulnerability : CVE-2023-30570

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pluto in Libreswan before 4.11 allows a denial of service responder SPI mishandling and daemon crash via unauthenticated IKEv1 Aggressive Mode packets. The...

The vulnerability of the Internet Key Exchange (IKEv2) key exchange function in Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD), as well as in Cisco IOS and Cisco IOS XE operating systems, allows a attacker to cause a service failure.

The vulnerability of the Internet Key Exchange IKEv2 key exchange function in Cisco Adaptive Security Appliances ASA and Cisco Firepower Threat Defense FTD, as well as in Cisco IOS and Cisco IOS XE operating systems, is related to memory release errors. Exploitation of this vulnerability can allo...

Linux Distros Unpatched Vulnerability : CVE-2022-23094

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libreswan 4.2 through 4.5 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted IKEv1 packet because...

Linux Distros Unpatched Vulnerability : CVE-2019-9894

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remotely triggerable memory overwrite in RSA key exchange in PuTTY before 0.71 can occur before host key verification. CVE-2019-9894 Note that Nessus relies o...

Linux Distros Unpatched Vulnerability : CVE-2025-30211

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init...