K000148713: libssh2 vulnerabilities CVE-2019-3858 and CVE-2019-3862

Security Advisory Description CVE-2019-3858 An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory...

K000148693: libssh2 vulnerability CVE-2015-1782

Security Advisory Description The kexagreemethods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service crash or have other unspecified impact via crafted length values in an SSHMSGKEXINIT packet. CVE-2015-1782 Impact There is no impact; F5 products are not affected ...

Slackware: Security Advisory (SSA:2024-290-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 / current libssh2 Vulnerability (SSA:2024-290-01)

The version of libssh2 installed on the remote host is prior to 1.11.1. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-290-01 advisory. New libssh2 packages are available for Slackware 15.0 and -current to fix a security issue. Tenable has extracted the preceding...

[slackware-security] libssh2

New libssh2 packages are available for Slackware 15.0 and -current to fix a security issue. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/libssh2-1.11.1-i586-1slack15.0.txz: Upgraded. src: add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack." For more information,...

RHSA-2023:5615 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

RHSA-2016:0428 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

RHSA-2015:2140 Red Hat Security Advisory: libssh2 security and bug fix update

Bulletin has no description...

RHSA-2020:3915 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

RHSA-2019:2399 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

RHSA-2019:1884 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

RHSA-2019:2136 Red Hat Security Advisory: libssh2 security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2019:1943 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

RHSA-2019:1652 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

RHSA-2019:1791 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

RHSA-2019:0679 Red Hat Security Advisory: libssh2 security update

Bulletin has no description...

PT-2024-40891 · Libssh2 · Libssh2

Name of the Vulnerable Software and Affected Versions: libssh2 affected versions not specified Description: The issue is related to a heap-double-free crash. Technical details about the crash include the involvement of the libssh2 default free function, session free, and libssh2 session free...

PT-2024-40864 · Libssh2 · Libssh2

Name of the Vulnerable Software and Affected Versions: libssh2 affected versions not specified Description: The issue is related to a heap-double-free crash. Technical details about the crash include the libssh2 default free function, diffie hellman sha algo, and kex method diffie hellman group14...

ROS-20240729-05

Vulnerability in the libssh2 library of Libgit2's implementation of Git's C methods is related to validation bugs of cryptographic signatures. Exploitation of the vulnerability could allow an attacker acting remotely, execute a man-in-the-middle attack...

Photon OS 4.0: Libssh2 PHSA-2023-4.0-0465

An update of the libssh2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0465. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...