Red Hat Security Advisory

RHSA-2023:6643

libssh security update

Released 2023-11-07 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 9) libssh-devel-0.10.4-11.el9
Red Hat Enterprise Linux BaseOS (v. 9) libssh-0.10.4-11.el9, libssh-config-0.10.4-11.el9

Fixes 2 records

TI-2023-01564 CVE-2023-1667 · GHSA-fx73-x3p9-h2wf

NULL pointer dereference in libssh

LOW 32

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01314 Published 2023-05-26 Partial fix CWE-476

TI-2023-02141 CVE-2023-2283 · GHSA-h9jw-g3xj-5hwg

Improper authentication in libssh

LOW 31

A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.01061 Published 2023-05-26 Partial fix CWE-287