Red Hat Security AdvisoryRHSA-2024:0538
libssh security update
Released 2024-01-29 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream EUS (v.8.6) libssh-devel-0.9.6-4.el8_6
- Red Hat Enterprise Linux BaseOS EUS (v.8.6) libssh-0.9.6-4.el8_6, libssh-config-0.9.6-4.el8_6
Fixes 3 records
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority LOW 32
A NULL pointer dereference was found In libssh during re-keying with algorithm guessing.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01314 · Published 2023-05-26 · Partial fix CWE-476
Priority LOW 31
A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01061 · Published 2023-05-26 · Partial fix CWE-287
