Juju 安全漏洞

Juju is a canonical Juju open-source application orchestration engine. Juju versions 3.6.18 and earlier contain security vulnerabilities. These vulnerabilities stem from race conditions in the key management subsystem, which may allow authenticated unit agents to obtain ownership of newly...

SUSE CVE-2015-3146

The 1 SSHMSGNEWKEYS and 2 SSHMSGKEXDHREPLY packet handlers in packagecb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted SSH packet...

libssh 'ssh_packet_kexdh_init()' denial of service vulnerability

libssh is a C library that implements the SSH2 protocol. In versions of libssh before 0.6.5, an error in the "sshpacketkexdhinit" function src/server.c when processing SSHMSGNEWKEYS and SSHMSGKEXDHREPLY packets can be exploited to cause a denial of service...