RHSA-2019:0679 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

PT-2024-40864 · Libssh2 · Libssh2

Name of the Vulnerable Software and Affected Versions: libssh2 affected versions not specified Description: The issue is related to a heap-double-free crash. Technical details about the crash include the libssh2 default free function, diffie hellman sha algo, and kex method diffie hellman group14...

PT-2024-40891 · Libssh2 · Libssh2

Name of the Vulnerable Software and Affected Versions: libssh2 affected versions not specified Description: The issue is related to a heap-double-free crash. Technical details about the crash include the involvement of the libssh2 default free function, session free, and libssh2 session free...

PT-2024-40859

Name of the Vulnerable Software and Affected Versions libssh2 affected versions not specified Description The issue is related to a null-dereference read crash. Technical details about the crash include the libssh2 packet add function, fullpacket, and the libssh2 transport read function...

ROS-20240729-05

Vulnerability in the libssh2 library of Libgit2's implementation of Git's C methods is related to validation bugs of cryptographic signatures. Exploitation of the vulnerability could allow an attacker acting remotely, execute a man-in-the-middle attack...

Photon OS 4.0: Libssh2 PHSA-2024-4.0-0638

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0638. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libssh2 PHSA-2023-5.0-0094

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0094. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Libssh2 PHSA-2023-4.0-0465

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0465. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Libssh2 PHSA-2019-3.0-0008

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-3.0-0008. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Libssh2 PHSA-2024-5.0-0188

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0188. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Libssh2 PHSA-2019-2.0-0146

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0146. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 2.0: Libssh2 PHSA-2019-2.0-0149

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-2.0-0149. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

RHEL 6 : libssh2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libssh2: Out-of-bounds memory comparison with specially crafted message channel request CVE-2019-3862 - A...

CBL Mariner 2.0 Security Update: cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt (CVE-2023-48795)

The version of cert-manager / cf-cli / docker-buildx / erlang / kubernetes / kubevirt installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-48795 advisory. - The SSH transport protocol with certain...

Moderate Photon OS Security Update - PHSA-2024-4.0-0638

Updates of 'nginx', 'libssh2' packages of Photon OS have been released...

libssh2:ssh2_client_fuzzer: Heap-double-free in libssh2_default_free

Project: https://github.com/cmeister2/libssh2.git https://github.com/libssh2/libssh2.git Detailed Report: https://oss-fuzz.com/testcase?key=5137089486716928 Project: libssh2 Fuzzing Engine: libFuzzer Fuzz Target: ssh2clientfuzzer Job Type: libfuzzerasanlibssh2 Platform Id: linux Crash Type:...

OPENSUSE-SU-2024:10190-1 libssh2-1-1.7.0-1.5 on GA media

These are all security issues fixed in the libssh2-1-1.7.0-1.5 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:10999-1 libssh2-1-1.9.0-3.6 on GA media

These are all security issues fixed in the libssh2-1-1.9.0-3.6 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13522-1 libssh2-1-1.11.0-2.1 on GA media

These are all security issues fixed in the libssh2-1-1.11.0-2.1 package on the GA media of openSUSE Tumbleweed...

RHEL 7 : libssh2 (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - libssh2: Out-of-bounds reads with specially crafted SFTP packets CVE-2019-3860 - In libssh2 before 1.9.0,...