Read the docs
TI-2023-01564 Aliases CVE-2023-1667GHSA-fx73-x3p9-h2wf

NULL pointer dereference in libssh

Priority LOW 32CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 6 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.

Why it matters now

EPSS 0.01314 70th percentileScored 2026-11-07
Fix Partial Red Hat: 3 advisoriesRed Hat: 6 fixed, 1 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—libsshlibssh-2—No fix listedCNA
  • libssh Vendor— Affected libssh-2 Fixed in — No fix listed CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*0.9.1 – 0.9.6; 0.10.0 – 0.10.4Vulnerablelibssh
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*37VulnerableFedoraproject
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
  • cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:* Versions 0.9.1 – 0.9.6; 0.10.0 – 0.10.4 Vulnerable ·libssh
  • cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* Versions 37 Vulnerable ·Fedoraproject
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat

Remediation

Red Hat 3 advisories

  • RHSA-2024:0538 Released 2024-01-29 · Red Hat rating Moderate
    libssh security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.6) libssh-devel-0.9.6-4.el8_6
    • Red Hat Enterprise Linux BaseOS EUS (v.8.6) libssh-0.9.6-4.el8_6, libssh-config-0.9.6-4.el8_6
  • RHSA-2023:6643 Released 2023-11-07 · Red Hat rating Moderate
    libssh security update
    • Red Hat Enterprise Linux AppStream (v. 9) libssh-devel-0.10.4-11.el9
    • Red Hat Enterprise Linux BaseOS (v. 9) libssh-0.10.4-11.el9, libssh-config-0.10.4-11.el9
  • RHSA-2023:3839 Released 2023-06-27 · Red Hat rating Moderate
    libssh security update
    • Red Hat Enterprise Linux AppStream (v. 8) libssh-devel-0.9.6-10.el8_8
    • Red Hat Enterprise Linux BaseOS (v. 8) libssh-0.9.6-10.el8_8, libssh-config-0.9.6-10.el8_8

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    libssh — FEDORA-2023-5fa5ca2043

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux 7AffectedNo fix planned: Out of support scope
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2023:3839
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2023:6643
Red Hat Enterprise Linux AppStream EUS (v.8.6)Fixed RHSA-2024:0538
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2023:3839
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2023:6643
Red Hat Enterprise Linux BaseOS EUS (v.8.6)Fixed RHSA-2024:0538
Not affected: 1 product
  • Red Hat Virtualization 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-1667
  2. 2026-10-03 Alias added: GHSA-fx73-x3p9-h2wf

References

Advisory 6

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences