234 matches found
SUSE CVE-2018-10933
A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, resulting in unauthorized access...
Oracle Linux 8 : libssh (ELSA-2022-2031)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-2031 advisory. - Fix CVE-2021-3634: Fix possible heap-buffer overflow when rekeying with different key exchange mechanism Tenable has extracted the preceding description block...
The vulnerability of the libssh library, related to the occurrence of operations outside the buffer in memory, allows a hacker to trigger a service failure.
The vulnerability of the libssh library is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
MGASA-2021-0441 Updated libssh packages fix security vulnerability
A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them is called secrethash and the other sessionid. Initially, both of them are the same, but after key re-exchange, previous sessionid is kept...
Denial Of Service
libssh is vulnerable to denial of service. The vulnerability exists due to authentication function which is using the buffer size of the initial secret key which can cause a heap-buffer overflow...
Vulnerability fixed in libssh
A vulnerability has been fixed in libssh. A malicious party could potentially exploit the vulnerability to cause a denial-of-service cause or execute arbitrary code with the privileges of application that uses libssh. It is good practice to apply the principle of "privilege separation" to this ty...
USN-5053-1 libssh vulnerability
It was discovered that libssh incorrectly handled rekeying. A remote attacker could use this issue to cause libssh to crash, resulting in a denial of service, or possibly execute arbitrary code...
Ubuntu 20.04 LTS : libssh vulnerability (USN-5053-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5053-1 advisory. It was discovered that libssh incorrectly handled rekeying. A remote attacker could use this issue to cause libssh to crash, resulting in a denial of service, or...
libssh: unsanitized location in scp could lead to unwanted command execution
A flaw was found with the libssh API function sshscpnew. A user able to connect to a server using SCP could execute arbitrary command using a user-provided path, leading to a compromise of the remote target...
Denial Of Service (DoS)
libssh is vulnerable to denial of service. A NULL pointer dereference occurs in tftpserver.c when sshbuffernew returns NULL, resulting in a denial of service condition...
CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...
Vulnerability of the ssh_scp_new() function in the libssh library, allowing a hacker to execute arbitrary code
The vulnerability of the sshscpnew function in the libssh library is related to the lack of measures taken at the control level to clean up data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability of the libssh library, related to uncontrolled resource consumption, allows a hacker to cause a service failure.
The vulnerability of the libssh library is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
Ubuntu 16.04 LTS / 18.04 LTS : libssh vulnerability (USN-4219-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4219-1 advisory. It was discovered that libssh incorrectly handled certain scp commands. If a user or automated system were tricked into using a specially-crafted scp...
Vulnerability fixed in libssh
A vulnerability has been fixed in libssh. The vulnerability allows a remote malicious person to execute arbitrary code execute arbitrary code under the user's privileges. libssh has made updates available to fix the vulnerability. fix. More information can be found on the page below:...
UBUNTU-CVE-2019-14889
A flaw was found with the libssh API function sshscpnew in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the library is used in a way where users can influence...
LibSSH 0.7.6 / 0.8.4 Unauthorized Access
!/usr/bin/env python3 import sys import paramiko import socket import logging pip3 install paramiko==2.0.8 logging.basicConfigstream=sys.stdout, level=logging.DEBUG logging.basicConfigstream=sys.stdout bufsize = 2048 def executehostname, port, command: sock = socket.socket try:...
