Security Bulletin: TSSC/IMC is vulnerable to a bypass security restrictions attack on curl

Summary TSSC/IMC is vulnerable to a bypass security restrictions attack on curl. A patch has been provided that updates the libssh library. CVE-2023-28322, CVE-2023-38546, CVE-2023-46218 Vulnerability Details CVEID:CVE-2023-28322 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass...

Libssh: missing checks for return values for digests

...

The vulnerability of the pki_verify_data_signature() function in the LibSSH client authentication library allows a perpetrator to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the pkiverifydatasignature function in the LibSSH client authentication library is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions and gain unauthorized access to protected...

USN-4219-1: libssh vulnerability

It was discovered that libssh incorrectly handled certain scp commands. If a user or automated system were tricked into using a specially-crafted scp command, a remote attacker could execute arbitrary commands on the server...

USN-3795-2: libssh vulnerability

USN-3795-1 fixed a vulnerability in libssh. This update provides the corresponding update for Ubuntu 18.10. Original advisory details: Peter Winter-Smith discovered that libssh incorrectly handled authentication when being used as a server. A remote attacker could use this issue to bypass...

The vulnerability of the authentication mechanism of the server-side part of the libssh library, which allows a hacker to bypass the authentication process

The vulnerability of the authentication mechanism for the server-side part of the libssh library is related to errors in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process by using a specially crafted message...

Libssh Type Obfuscation Vulnerability

libssh is a C development package for accessing SSH services, which can execute remote commands, file transfers, and also provide a secure transmission channel for remote programs. A type-obfuscation vulnerability exists in versions of libssh prior to 0.7.3, which stems from a type-obfuscation...

DEBIAN-CVE-2012-6063

Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...