libssh vulnerabilities (Azure Linux)
22 vulnerabilities.
-
libsshAzure Linux Libssh: libssh: use-after-free via data callbacks on closed channels 4.3 Medium -
libsshAzure Linux Libssh: libssh: denial of service via sftp responses with unknown request ids 5.3 Medium -
libsshAzure Linux Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification 5.9 Medium -
libsshAzure Linux Libssh: libssh: denial of service via oversized sftp read length 6.5 Medium -
libsshAzure Linux Libssh: libssh: denial of service via unchecked proxycommand fork() failure 5.3 Medium -
libsshAzure Linux Libssh: libssh: denial of service via zero advertised channel packet size 6.5 Medium -
libsshAzure Linux libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds 6.9 Medium -
libsshAzure Linux Libssh: libssh: denial of service due to malformed sftp message 3.1 Low -
libsshAzure Linux Libssh: libssh: denial of service via inefficient regular expression processing 2.2 Low -
libsshAzure Linux Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 6.5 Medium -
libsshAzure Linux Libssh: libssh: denial of service via improper configuration file handling 3.3 Low -
libsshAzure Linux Libssh: improper sanitation of paths received from scp servers 5.0 Medium -
libsshAzure Linux Libssh: memory exhaustion via repeated key exchange in libssh 3.1 Low -
libsshAzure Linux Libssh: null pointer dereference in libssh kex session id calculation 4.7 Medium -
libsshAzure Linux Libssh: invalid return code for chacha20 poly1305 with openssl backend 8.1 High -
libsshAzure Linux Libssh: incorrect return code handling in ssh_kdf() in libssh 5.0 Medium -
libsshAzure Linux Libssh: double free vulnerability in libssh key export functions 6.5 Medium -
libsshAzure Linux Libssh: use of uninitialized variable in privatekey_from_file() 3.6 Low -
libsshAzure Linux Libssh: out-of-bounds read in sftp_handle() 5.4 Medium -
libsshAzure Linux Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname 4.8 Medium -
libsshAzure Linux Libssh: missing checks for return values for digests 3.7 Low -
libsshAzure Linux Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium