CVE-2015-3146

The 1 SSHMSGNEWKEYS and 2 SSHMSGKEXDHREPLY packet handlers in packagecb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted SSH packet...

Security fix for the ALT Linux 8 package libssh version 0.6.5-alt1

June 17, 2015 Sergey V Turchin 0.6.5-alt1 - new version - security fix: CVE-2015-3146...