CVE-2012-4562
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of...
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.
Exploit likelihood
What each source reports
NVD Score used
7.5
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.
- Record
CVE-2012-4562- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.
- Record
CVE-2012-4562- Updated
- 2026-11-02
EUVDEUVD-2012-4490 No score
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.
- Record
EUVD-2012-4490- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-44f3-h584-r9pm No score
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of...
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.
- Record
GHSA-44f3-h584-r9pm- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.
- Record
CVE-2012-4562- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-4562 No score
Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.
- Record
DEBIAN-CVE-2012-4562- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-4562 is a high vulnerability (CVSS 7.5) in Libssh, published November 30, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.8%, the 96th percentile. Fixed in libssh 0.5.3-1.
References
lists.opensuse.org/opensuse-security-announce/2012-11/msg00015.html
debian.org/security/2012/dsa-2577
mandriva.com/security/advisories?name=MDVSA-2012:175
ubuntu.com/usn/USN-1640-1
lists.opensuse.org/opensuse-updates/2013-01/msg00021.html
lists.opensuse.org/opensuse-updates/2012-12/msg00016.html
Show 11 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=871620
lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.html
lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html
openwall.com/lists/oss-security/2012/11/20/3
exchange.xforce.ibmcloud.com/vulnerabilities/80221
lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html
securityfocus.com/bid/56604
libssh.org/2012/11/20/libssh-0-5-3-security-release
nvd.nist.gov/vuln/detail/CVE-2012-4562
github.com/advisories/GHSA-44f3-h584-r9pm
security-tracker.debian.org/tracker/CVE-2012-4562