Red Hat Security AdvisoryRHSA-2023:5615
libssh2 security update
Released 2023-10-10 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libssh2-1.8.0-4.el7_9.1
- Red Hat Enterprise Linux Client Optional (v. 7) libssh2-devel-1.8.0-4.el7_9.1, libssh2-docs-1.8.0-4.el7_9.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libssh2-devel-1.8.0-4.el7_9.1, libssh2-docs-1.8.0-4.el7_9.1
- Red Hat Enterprise Linux Server (v. 7) libssh2-1.8.0-4.el7_9.1, libssh2-1.8.0-4.el7_9.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) libssh2-devel-1.8.0-4.el7_9.1, libssh2-devel-1.8.0-4.el7_9.1.ppc, libssh2-docs-1.8.0-4.el7_9.1
- Red Hat Enterprise Linux Workstation (v. 7) libssh2-1.8.0-4.el7_9.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) libssh2-devel-1.8.0-4.el7_9.1, libssh2-docs-1.8.0-4.el7_9.1
Fixes 1 record
Priority MEDIUM 41
An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01155 · Published 2023-08-22 · Partial fix CWE-787
