Lucene search
UbuntuUSN-1640-1HistoryNov 26, 2012 - 12:00 a.m.
libssh vulnerabilities
2012-11-2600:00:00
ubuntu.com
33
7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.104 Low
EPSS
Percentile
95.0%
Releases
- Ubuntu 12.10
- Ubuntu 12.04
- Ubuntu 11.10
- Ubuntu 10.04
Packages
- libssh - A tiny C SSH library
Details
Xi Wang and Florian Weimer discovered that libssh incorrectly handled
memory. A remote attacker could use this to cause libssh to crash,
resulting in a denial of service, or possibly execute arbitrary code.
(CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 12.10 | noarch | libssh-4 | < 0.5.2-1ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libssh-dbg | < 0.5.2-1ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libssh-dev | < 0.5.2-1ubuntu0.12.10.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-4 | < 0.5.2-1ubuntu0.12.04.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-dbg | < 0.5.2-1ubuntu0.12.04.1 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-dev | < 0.5.2-1ubuntu0.12.04.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libssh-4 | < 0.5.2-1ubuntu0.11.10.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libssh-dbg | < 0.5.2-1ubuntu0.11.10.1 | UNKNOWN |
| Ubuntu | 11.10 | noarch | libssh-dev | < 0.5.2-1ubuntu0.11.10.1 | UNKNOWN |
| Ubuntu | 10.04 | noarch | libssh-4 | < 0.4.2-1ubuntu1.1 | UNKNOWN |
Related
fedora
fedora
[SECURITY] Fedora 17 Update: libssh-0.5.3-1.fc17
2012-11-29 06:04:07
[SECURITY] Fedora 17 Update: libssh-0.5.3-1.fc17
2012-11-29 04:01:06
[SECURITY] Fedora 18 Update: libssh-0.5.3-1.fc18
2012-11-27 05:30:36
openvas
openvas
Fedora Update for libssh FEDORA-2012-18677
2012-11-29 00:00:00
SuSE Update for update openSUSE-SU-2012:1620-1 (update)
2013-03-11 00:00:00
Mandriva Update for libssh MDVSA-2012:175 (libssh)
2012-12-04 00:00:00
securityvulns
securityvulns
libssh multiple security vulnerabilities
2012-12-02 00:00:00
[ MDVSA-2012:175 ] libssh
2012-12-02 00:00:00
nessus
nessus
openSUSE Security Update : libssh (openSUSE-SU-2012:1622-1)
2014-06-13 00:00:00
Slackware 14.0 / current : libssh (SSA:2012-341-02)
2012-12-07 00:00:00
Mandriva Linux Security Advisory : libssh (MDVSA-2012:175)
2012-11-30 00:00:00
suse
suse
update for libssh (important)
2012-12-07 11:08:42
Security update for libssh2 (important)
2012-11-21 19:08:51
slackware
slackware
[slackware-security] libssh
2012-12-07 03:51:03
debian
debian
[SECURITY] [DSA 2577-1] libssh security update
2012-12-01 14:13:53
gentoo
gentoo
libssh: Arbitrary code execution
2014-02-21 00:00:00
osv
osv
libssh - several
2012-12-01 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package libssh version 0.5.3-alt1
2012-11-21 00:00:00
Security fix for the ALT Linux 9 package libssh version 0.5.3-alt1
2012-11-21 00:00:00
Security fix for the ALT Linux 7 package libssh version 0.5.3-alt1
2012-11-21 00:00:00
debiancve
debiancve
cvelist
cvelist
prion
prion
Path traversal
2012-11-30 22:55:00
Integer overflow
2012-11-30 22:55:00
Buffer overflow
2012-11-30 22:55:00
ubuntucve
ubuntucve
cve
cve
7.4 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.104 Low
EPSS
Percentile
95.0%
Related for USN-1640-1