2494 matches found
CVE-2012-6063
Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...
CVE-2012-6063
Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...
CVE-2012-4561
Libssh: CVE-2012-4561 in libssh prior to 0.5.3 is caused by memory-management issues that free an invalid pointer on an error path, potentially enabling remote denial of service (crash). Several connected advisories also reference related CVEs (4559, 4560, 4562) and note memory-management flaws w...
CVE-2012-4561
The 1 publickeymakedss, 2 publickeymakersa, 3 signaturefromstring, 4 sshdosign, and 5 sshsignsessionid functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service crash via unspecified vectors...
CVE-2012-4559
Multiple double free vulnerabilities in the 1 agentsigndata function in agent.c, 2 channelrequest function in channels.c, 3 sshuserauthpubkey function in auth.c, 4 sftpparseattr3 function in sftp.c, and 5 trypublickeyfromfile function in keyfiles.c in libssh before 0.5.3 allow remote attackers to...
CVE-2012-4561
The 1 publickeymakedss, 2 publickeymakersa, 3 signaturefromstring, 4 sshdosign, and 5 sshsignsessionid functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service crash via unspecified vectors...
CVE-2012-4562
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service infinite loop or crash and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities...
CVE-2012-6063
Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...
PT-2012-1179
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.3 Description The issue concerns multiple vulnerabilities in the libssh package, which can be exploited remotely. This exploitation may lead to a breach of confidentiality, integrity, and availability of protected...
CVE-2012-4559: Undefined Security Weakness
Multiple double free vulnerabilities in the 1 agentsigndata function in agent.c, 2 channelrequest function in channels.c, 3 sshuserauthpubkey function in auth.c, 4 sftpparseattr3 function in sftp.c, and 5 trypublickeyfromfile function in keyfiles.c in libssh before 0.5.3 allow remote attackers to...
CVE-2012-4562: Undefined Security Weakness
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service infinite loop or crash and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities...
CVE-2012-4560: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via unspecified vectors...
PT-2012-1036
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.3 Description The issue affects the libssh package, allowing remote attackers to exploit multiple double free vulnerabilities. These vulnerabilities are located in various functions, including agent sign data in...
PT-2012-1038
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.3 Description The issue is related to a double free vulnerability in the sftp mkdir function in sftp.c, which can be exploited by remote attackers to cause a denial of service crash and possibly execute arbitrary...
CVE-2012-6063: Undefined Security Weakness
Double free vulnerability in the sftpmkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559...
PT-2012-1037
Name of the Vulnerable Software and Affected Versions libssh versions prior to 0.5.3 Description The issue affects multiple functions in keys.c in libssh, including publickey make dss, publickey make rsa, signature from string, ssh do sign, and ssh sign session id. This might allow remote attacke...
CVE-2012-4561: Undefined Security Weakness
The 1 publickeymakedss, 2 publickeymakersa, 3 signaturefromstring, 4 sshdosign, and 5 sshsignsessionid functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service crash via unspecified vectors...
Mandriva Linux Security Advisory : libssh (MDVSA-2012:175)
Multiple double free, buffer overflow, invalid free and improper overflow checks vulnerabilities was found and corrected in libssh CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562. The updated packages have been upgraded to the 0.5.3 version which is not affected by these issues...
Fedora 17 : libssh-0.5.3-1.fc17 (2012-18677)
This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...
Ubuntu Update for libssh USN-1640-1
Ubuntu Update for Linux kernel vulnerabilities USN-1640-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16401.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for libssh USN-1640-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...