K000148483: libssh vulnerabilities CVE-2019-14889 and CVE-2023-3603

Security Advisory Description CVE-2019-14889 A flaw was found with the libssh API function sshscpnew in versions before 0.9.3 and before 0.8.8. When the libssh SCP client connects to a server, the scp command, which includes a user-provided path, is executed on the server-side. In case the librar...

Advisory ROSA-SA-2024-2516

software: libssh 0.9.7 OS: ROSA-CHROME packageevrstring: libssh-0.9.7-1 CVE-ID: CVE-2023-1667 BDU-ID: 2023-03857 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the LibSSH client authentication library is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker...

RHSA-2024:0628 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHSA-2024:0625 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHSA-2024:0538 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHSA-2024:0499 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHBA-2024:1127 Red Hat Bug Fix Advisory: libssh bug fix update

Bulletin has no description...

RHSA-2024:3233 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHSA-2024:2504 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHSA-2023:6643 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHSA-2023:3839 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHSA-2022:2031 Red Hat Security Advisory: libssh security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2021:4387 Red Hat Security Advisory: libssh security update

Bulletin has no description...

RHSA-2020:4545 Red Hat Security Advisory: libssh security, bug fix, and enhancement update

Bulletin has no description...

RHSA-2016:0566 Red Hat Security Advisory: libssh security update

Bulletin has no description...

NewStart CGSL MAIN 6.02 : libssh Multiple Vulnerabilities (NS-SA-2024-0052)

The remote NewStart CGSL host, running version MAIN 6.02, has libssh packages installed that are affected by multiple vulnerabilities: - The RANDbytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator PRNG,...

Libssh Authentication Bypass Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'libssh Authentication Bypass Scanner', 'Description' = %q This module exploits an authentication bypass in libssh server code where a...

Multiple CVEs identified by vulnerability scanning tools addressed via Brocade ASCG v3.1.0

ASCG v3.1.0 utilizes Rocky Linux version 8.10, addressing a number of potential security vulnerabilities. A complete list of CVEs reported by Rocky Linux as being addressed in this update are provided in the ASCG v3.1.0 Release Notes. In addition, a number of CVEs identified via internal security...

Photon OS 5.0: Libssh PHSA-2023-5.0-0089

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0089. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Libssh PHSA-2023-3.0-0645

An update of the libssh package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0645. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...