1309 matches found
OSV-2025-92 Null-dereference READ in session_startup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=393523566 Crash type: Null-dereference READ Crash state: sessionstartup libssh2sessionhandshake ssh2clientfuzzer.cc...
PT-2025-20012
Name of the Vulnerable Software and Affected Versions libssh2 affected versions not specified Description The software is susceptible to a null-dereference read issue during session startup and the libssh2 session handshake process, as identified by OSS-Fuzz. The issue occurs within the ssh2 clie...
libssh2:ssh2_client_fuzzer: Null-dereference READ in session_startup
Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=6345500428664832 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type:...
libssh2:ssh2_client_fuzzer: Null-dereference READ in ubsan_GetStackTrace
Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=4575485367746560 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerubsanlibssh2 Platform Id: linux Crash Type:...
Advisory ROSA-SA-2025-2675
software: libssh2 1.10.0 OS: ROSA-CHROME packageevrstring: libssh2-1.10.0-3 CVE-ID: CVE-2023-48795 BDU-ID: 2023-08853 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the SSH protocol implementation is related to the ability to adjust packet sequence numbers during the connection negotiation process...
K000148713: libssh2 vulnerabilities CVE-2019-3858 and CVE-2019-3862
Security Advisory Description CVE-2019-3858 An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory...
K000148693: libssh2 vulnerability CVE-2015-1782
Security Advisory Description The kexagreemethods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service crash or have other unspecified impact via crafted length values in an SSHMSGKEXINIT packet. CVE-2015-1782 Impact There is no impact; F5 products are not affected ...
Slackware Linux 15.0 / current libssh2 Vulnerability (SSA:2024-290-01)
The version of libssh2 installed on the remote host is prior to 1.11.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-290-01 advisory. New libssh2 packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...
Slackware: Security Advisory (SSA:2024-290-01)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[slackware-security] libssh2
New libssh2 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libssh2-1.11.1-i586-1slack15.0.txz: Upgraded. src: add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack." For more information,...
RHSA-2023:5615 Red Hat Security Advisory: libssh2 security update
Bulletin has no description...
RHSA-2016:0428 Red Hat Security Advisory: libssh2 security update
Bulletin has no description...
RHSA-2015:2140 Red Hat Security Advisory: libssh2 security and bug fix update
Bulletin has no description...
RHSA-2020:3915 Red Hat Security Advisory: libssh2 security update
Bulletin has no description...
RHSA-2019:2399 Red Hat Security Advisory: libssh2 security update
Bulletin has no description...
RHSA-2019:1884 Red Hat Security Advisory: libssh2 security update
Bulletin has no description...
RHSA-2019:2136 Red Hat Security Advisory: libssh2 security, bug fix, and enhancement update
Bulletin has no description...
RHSA-2019:1943 Red Hat Security Advisory: libssh2 security update
Bulletin has no description...