13 matches found
EUVD-2026-48722
libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...
CVE-2026-66035
libssh2 through 1.11.1, fixed in commit 42e33d8, contains a pre-authentication heap buffer overflow vulnerability that allows a malicious SSH server to corrupt heap metadata in any connecting client by sending a packet with a packetlength smaller than the cipher's block size during Encrypt-then-M...
EUVD-2016-10380
Malware in sbrugna...
PT-2025-20012
Name of the Vulnerable Software and Affected Versions libssh2 affected versions not specified Description The software is susceptible to a null-dereference read issue during session startup and the libssh2 session handshake process, as identified by OSS-Fuzz. The issue occurs within the ssh2 clie...
PT-2022-36872
Name of the Vulnerable Software and Affected Versions libssh2 affected versions not specified Description The issue is related to a null-dereference read crash. It occurs during the session startup in the libssh2 session handshake function. Recommendations At the moment, there is no information...
CVE-2016-9574
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA...
CVE-2016-9574
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA...
Design/Logic Flaw
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA...
CVE-2016-9574
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA...
CVE-2016-9574
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA...
CVE-2016-9574
nss before version 3.30 is vulnerable to a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA...
PT-2018-5095
Name of the Vulnerable Software and Affected Versions nss versions prior to 3.30 Description The issue allows for a remote denial of service during the session handshake when using SessionTicket extension and ECDHE-ECDSA. Recommendations For versions prior to 3.30, update to version 3.30 or later...
