libssh2 vulnerabilities (Chainguard)
29 vulnerabilities.
libssh2Chainguardlibssh2 Heap Buffer Overflow via ETM Cipher Negotiation7.7 Highlibssh2Chainguardlibssh2 Heap Out-of-Bounds Read via publickey subsystem7.7 Highlibssh2Chainguardlibssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation8.7 Highlibssh2Chainguardlibssh2 Double-Free Heap Corruption via sftp_open()8.7 Highlibssh2ChainguardLibssh: libssh: authentication bypass via missing gssapi principal check8.8 Highlibssh2ChainguardLibssh: libssh: use-after-free via data callbacks on closed channels4.3 Mediumlibssh2ChainguardLibssh: libssh: denial of service via automatic certificate authentication loop3.1 Lowlibssh2ChainguardLibssh: libssh: denial of service via sftp responses with unknown request ids5.3 Mediumlibssh2ChainguardLibssh: libssh: integrity downgrade via openssl aes-gcm tag verification5.9 Mediumlibssh2ChainguardLibssh: libssh: information disclosure via proxycommand %r username expansion3.9 Lowlibssh2ChainguardLibssh: libssh: denial of service via oversized sftp read length6.5 Mediumlibssh2ChainguardLibssh: libssh: denial of service via unchecked proxycommand fork() failure5.3 Mediumlibssh2ChainguardLibssh: libssh: denial of service via zero advertised channel packet size6.5 Mediumlibssh2ChainguardLibssh: libssh: information disclosure via short gssapi curve25519 public key3.7 Lowlibssh2ChainguardLibssh: libssh: stack buffer overflow in sftp server longname construction6.7 Mediumlibssh2Chainguardlibssh2 - Free of Uninitialized Pointer in publickey List Cleanup8.3 Highlibssh2Chainguardlibssh2 - Integer Overflow in publickey Subsystem Attribute Allocation8.3 Highlibssh2ChainguardNo scorelibssh2ChainguardNo scorelibssh2Chainguardlibssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c8.3 Highlibssh2Chainguardlibssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c9.2 Criticallibssh2Chainguardlibssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler8.2 Highlibssh2Chainguardlibssh2 userauth.c userauth_password integer overflow6.9 Mediumlibssh2ChainguardLibssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows7.8 Highlibssh2ChainguardLibssh: invalid return code for chacha20 poly1305 with openssl backend8.1 Highlibssh2ChainguardLibssh: out-of-bounds read in sftp_handle()5.4 Mediumlibssh2ChainguardLibssh: missing checks for return values for digests3.7 Lowlibssh2ChainguardPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumlibssh2ChainguardProcessing sftp server read may cause null dereference3.1 Low