1 matches found
MGASA-2016-0392 Updated libssh2 packages fix security vulnerability
Andreas Schneider reported that libssh2 passes the number of bytes to a function that expects number of bits during the SSHv2 handshake when libssh2 is to get a suitable value for 'group order' in the Diffie-Hellman negotiation. This weakens significantly the handshake security, potentially...
5.9CVSS5.8AI score0.02591EPSS
SaveExploits0References4
20