2015 matches found
PT-2026-1659
Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description The libssh software contains a flaw related to a global knownhost override. This issue could potentially allow an attacker to bypass host key verification, potentially leading to...
PT-2025-27030
Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified Description: The issue concerns package vulnerabilities in libssh. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2025-30668
Name of the Vulnerable Software and Affected Versions libssh affected versions not specified Description A flaw exists in libssh, a library implementing the SSH protocol. During the key exchange KEX process, an allocation failure within cryptographic functions can result in a NULL pointer...
PT-2025-36723
Name of the Vulnerable Software and Affected Versions: libssh affected versions not specified Description: A memory exhaustion issue exists in libssh’s handling of key exchange KEX processes. When a client repeatedly sends incorrect KEX guesses, the library fails to free memory during rekey...
Security Bulletin: Vulnerabilities in libssh (CVE-2023-6004, CVE-2023-6918) affect Power HMC.
Summary The libssh library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2023-6004 DESCRIPTION: libssh could allow a local authenticated attacker to execute arbitrary commands on the system, caused by a flaw in the...
K000148495: libssh vulnerability CVE-2023-1667
Security Advisory Description A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service. CVE-2023-1667 Impact This vulnerability may allow an authenticated client to cause a denial-of-service...
F5 Networks BIG-IP : libssh vulnerability (K000148495)
The version of F5 Networks BIG-IP installed on the remote host is prior to 17.1.3.1 / 17.5.1.4 / 21.0.0. It is, therefore, affected by a vulnerability as referenced in the K000148495 advisory. A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may...
Security Bulletin: TSSC/IMC is vulnerable to a bypass security restrictions attack on curl
Summary TSSC/IMC is vulnerable to a bypass security restrictions attack on curl. A patch has been provided that updates the libssh library. CVE-2023-28322, CVE-2023-38546, CVE-2023-46218 Vulnerability Details CVEID:CVE-2023-28322 DESCRIPTION: cURL libcurl could allow a remote attacker to bypass...
K000148483: libssh vulnerabilities CVE-2019-14889 and CVE-2023-3603
Security Advisory Description CVE-2019-14889 A flaw was found with the libssh API function sshscpnew in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the librar...
Advisory ROSA-SA-2024-2516
software: libssh 0.9.7 OS: ROSA-CHROME packageevrstring: libssh-0.9.7-1 CVE-ID: CVE-2023-1667 BDU-ID: 2023-03857 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the LibSSH client authentication library is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker...
RHSA-2024:0628 Red Hat Security Advisory: libssh security update
Bulletin has no description...
RHSA-2024:0625 Red Hat Security Advisory: libssh security update
Bulletin has no description...
RHSA-2024:0538 Red Hat Security Advisory: libssh security update
Bulletin has no description...
RHSA-2024:0499 Red Hat Security Advisory: libssh security update
Bulletin has no description...
RHBA-2024:1127 Red Hat Bug Fix Advisory: libssh bug fix update
Bulletin has no description...
RHSA-2024:3233 Red Hat Security Advisory: libssh security update
Bulletin has no description...
RHSA-2024:2504 Red Hat Security Advisory: libssh security update
Bulletin has no description...
RHSA-2023:6643 Red Hat Security Advisory: libssh security update
Bulletin has no description...