CVE-2012-4559

Multiple double free vulnerabilities in the 1 agentsigndata function in agent.c, 2 channelrequest function in channels.c, 3 sshuserauthpubkey function in auth.c, 4 sftpparseattr3 function in sftp.c, and 5 trypublickeyfromfile function in keyfiles.c in libssh before 0.5.3 allow remote attackers to...

CVE-2012-4562

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service infinite loop or crash and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities...

CVE-2012-6063

Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...

CVE-2012-4562

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service infinite loop or crash and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities...

CVE-2012-4559

Multiple double free vulnerabilities in the 1 agentsigndata function in agent.c, 2 channelrequest function in channels.c, 3 sshuserauthpubkey function in auth.c, 4 sftpparseattr3 function in sftp.c, and 5 trypublickeyfromfile function in keyfiles.c in libssh before 0.5.3 allow remote attackers to...

CVE-2012-6063

Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...

CVE-2012-4561

The 1 publickeymakedss, 2 publickeymakersa, 3 signaturefromstring, 4 sshdosign, and 5 sshsignsessionid functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service crash via unspecified vectors...

CVE-2012-4562

CVE-2012-4562 : The provided documents confirm a vulnerability in libssh involving multiple buffer overflow, double-free, and integer overflow issues. The root cause is memory-management/overflow flaws in libssh up to version 0.5.2, allowing a remote attacker to potentially crash the service or e...

CVE-2012-6063

Technical details about CVE-2012-6063 (affected software, root cause, impact, and fixes) are not publicly provided in the supplied documents. Monitor for updates in connected advisories.

CVE-2012-4560

Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors...

PT-2012-1036

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.3 Description The issue affects the libssh package, allowing remote attackers to exploit multiple double free vulnerabilities. These vulnerabilities are located in various functions, including agent sign data in...

CVE-2012-4561: Undefined Security Weakness

The 1 publickeymakedss, 2 publickeymakersa, 3 signaturefromstring, 4 sshdosign, and 5 sshsignsessionid functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service crash via unspecified vectors...

PT-2012-1037

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.3 Description The issue affects multiple functions in keys.c in libssh, including publickey make dss, publickey make rsa, signature from string, ssh do sign, and ssh sign session id. This might allow remote attacke...

PT-2012-1038

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.3 Description The issue is related to a double free vulnerability in the sftp mkdir function in sftp.c, which can be exploited by remote attackers to cause a denial of service crash and possibly execute arbitrary...

PT-2012-1179

Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.3 Description The issue concerns multiple vulnerabilities in the libssh package, which can be exploited remotely. This exploitation may lead to a breach of confidentiality, integrity, and availability of protected...

CVE-2012-6063: Undefined Security Weakness

Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...

CVE-2012-4562: Undefined Security Weakness

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service infinite loop or crash and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities...

CVE-2012-4559: Undefined Security Weakness

Multiple double free vulnerabilities in the 1 agentsigndata function in agent.c, 2 channelrequest function in channels.c, 3 sshuserauthpubkey function in auth.c, 4 sftpparseattr3 function in sftp.c, and 5 trypublickeyfromfile function in keyfiles.c in libssh before 0.5.3 allow remote attackers to...

CVE-2012-4560: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors...

Mandriva Linux Security Advisory : libssh (MDVSA-2012:175)

Multiple double free, buffer overflow, invalid free and improper overflow checks vulnerabilities was found and corrected in libssh CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562. The updated packages have been upgraded to the 0.5.3 version which is not affected by these issues...