libssh vulnerabilities (Debian)
46 vulnerabilities.
-
libsshDebian Libssh: libssh: authentication bypass via missing gssapi principal check 8.8 High -
libsshDebian Libssh: libssh: use-after-free via data callbacks on closed channels 4.3 Medium -
libsshDebian Libssh: libssh: denial of service via automatic certificate authentication loop 3.1 Low -
libsshDebian Libssh: libssh: denial of service via sftp responses with unknown request ids 5.3 Medium -
libsshDebian Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification 5.9 Medium -
libsshDebian Libssh: libssh: information disclosure via proxycommand %r username expansion 3.9 Low -
libsshDebian Libssh: libssh: denial of service via oversized sftp read length 6.5 Medium -
libsshDebian Libssh: libssh: denial of service via unchecked proxycommand fork() failure 5.3 Medium -
libsshDebian Libssh: libssh: denial of service via zero advertised channel packet size 6.5 Medium -
libsshDebian Libssh: libssh: information disclosure via short gssapi curve25519 public key 3.7 Low -
libsshDebian Libssh: libssh: stack buffer overflow in sftp server longname construction 6.7 Medium -
libsshDebian libssh SFTP Extension Name sftp.c sftp_extensions_get_data out-of-bounds 6.9 Medium -
libsshDebian Libssh: libssh: denial of service due to malformed sftp message 3.1 Low -
libsshDebian Libssh: libssh: denial of service via inefficient regular expression processing 2.2 Low -
libsshDebian Libssh: libssh: denial of service via zero-length input in ssh_get_hexa() 6.5 Medium -
libsshDebian Libssh: libssh: denial of service via improper configuration file handling 3.3 Low -
libsshDebian Libssh: improper sanitation of paths received from scp servers 5.0 Medium -
libsshDebian Libssh: memory exhaustion via repeated key exchange in libssh 3.1 Low -
libsshDebian Libssh: null pointer dereference in libssh kex session id calculation 4.7 Medium -
libsshDebian Libssh: invalid return code for chacha20 poly1305 with openssl backend 8.1 High -
libsshDebian Libssh: integer overflow in libssh sftp server packet length validation leading to denial of service 6.5 Medium -
libsshDebian Libssh: incorrect return code handling in ssh_kdf() in libssh 5.0 Medium -
libsshDebian Libssh: double free vulnerability in libssh key export functions 6.5 Medium -
libsshDebian Libssh: use of uninitialized variable in privatekey_from_file() 3.6 Low -
libsshDebian Libssh: write beyond bounds in binary to base64 conversion functions 4.5 Medium -
libsshDebian Libssh: out-of-bounds read in sftp_handle() 5.4 Medium -
libsshDebian Libssh: proxycommand/proxyjump features allow injection of malicious code through hostname 4.8 Medium -
libsshDebian Libssh: missing checks for return values for digests 3.7 Low -
libsshDebian Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
libsshDebian A vulnerability was found in libssh, where the authentication check of the connecting client can... 6.5 Medium -
libsshDebian A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This... 6.5 Medium -
libsshDebian A flaw has been found in libssh in versions prior to 0.9.6. The SSH protocol keeps track of two... 6.5 Medium -
libsshDebian libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. 5.9 Medium -
libsshDebian A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR ... 5.3 Medium -
libsshDebian A flaw was found with the libssh API function ssh_scp_new() in versions before 0.9.3 and before 0... 7.1 High -
libsshDebian A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.... 9.1 Critical -
libsshDebian libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman... 5.9 Medium -
libsshDebian The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh... 7.5 High -
libsshDebian Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x... 5.0 Medium -
libsshDebian The RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset... 1.9 Low -
libsshDebian The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched... 4.3 Medium -
libsshDebian Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows... 7.5 High -
libsshDebian Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of... 7.5 High -
libsshDebian The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign,... 5.0 Medium -
libsshDebian Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of... 7.5 High -
libsshDebian Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2)... 6.8 Medium