[SECURITY] [DLA 2303-1] libssh security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2303-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 31, 2020 https://wiki.debian.org/LTS -...

CVE-2020-16135

A flaw was found in libssh. A NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL. Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicabili...

DLA-2303-1 libssh - security update

Bulletin has no description...

Libssh Null Pointer Dereference Vulnerability

libssh is a multi-platform C library that implements the SSHv2 protocol on the client and server side. A null pointer dereference vulnerability exists in tftpserver.c in libssh 0.9.4. No detailed vulnerability details are provided at this time...

CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

DEBIAN-CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

ALPINE-CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

UBUNTU-CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

Null pointer dereference

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

CVE-2020-16135

CVE-2020-16135 affects libssh 0.9.4. The vulnerability is a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL, which can lead to a crash/denial of service. Connected documents confirm the issue and indicate that fixes were released (e.g., libssh 0.9.5 and security advisories...

CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

Huawei EulerOS: Security Advisory for libssh (EulerOS-SA-2020-1699)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : libssh (EulerOS-SA-2020-1699)

According to the version of the libssh package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerability : - A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR or DES ciphers if enabled...

Vulnerability of the ssh_scp_new() function in the libssh library, allowing a hacker to execute arbitrary code

The vulnerability of the sshscpnew function in the libssh library is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the libssh library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the libssh library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...

libssh:ssh_server_fuzzer: Use-of-uninitialized-value in BN_ucmp

Detailed Report: https://oss-fuzz.com/testcase?key=5152650317529088 Project: libssh Fuzzing Engine: libFuzzer Fuzz Target: sshserverfuzzer Job Type: libfuzzermsanlibssh Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: BNucmp BNnistmod384 ecGFpnistfieldsqr...

Fedora: Security Advisory for libssh (FEDORA-2020-6cad41abb0)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...