Red Hat Security AdvisoryRHSA-2015:2140
libssh2 security and bug fix update
Released 2015-11-19 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libssh2-1.4.3-10.el7
- Red Hat Enterprise Linux Client Optional (v. 7) libssh2-devel-1.4.3-10.el7, libssh2-docs-1.4.3-10.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) libssh2-1.4.3-10.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libssh2-devel-1.4.3-10.el7, libssh2-docs-1.4.3-10.el7
- Red Hat Enterprise Linux Server (v. 7) libssh2-1.4.3-10.el7, libssh2-1.4.3-10.el7.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libssh2-devel-1.4.3-10.el7, libssh2-devel-1.4.3-10.el7.ppc, libssh2-docs-1.4.3-10.el7
- Red Hat Enterprise Linux Workstation (v. 7) libssh2-1.4.3-10.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) libssh2-devel-1.4.3-10.el7, libssh2-docs-1.4.3-10.el7
Fixes 1 record
Priority LOW 36
The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03501 · Published 2015-03-13 · Partial fix CWE-20
