libssh2 vulnerabilities (Debian)
26 vulnerabilities.
-
libssh2Debian libssh2 Heap Buffer Overflow via ETM Cipher Negotiation 7.7 High -
libssh2Debian libssh2 Heap Out-of-Bounds Read via publickey subsystem 7.7 High -
libssh2Debian libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation 8.7 High -
libssh2Debian libssh2 Double-Free Heap Corruption via sftp_open() 8.7 High -
libssh2Debian libssh2 - Free of Uninitialized Pointer in publickey List Cleanup 8.3 High -
libssh2Debian libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation 8.3 High -
libssh2Debian libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c 8.3 High -
libssh2Debian libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 9.2 Critical -
libssh2Debian libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler 8.2 High -
libssh2Debian libssh2 userauth.c userauth_password integer overflow 6.9 Medium -
libssh2Debian Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
libssh2Debian An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to... 7.5 High -
libssh2Debian In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer... 8.1 High -
libssh2Debian In libssh2 before 1.9.0, kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c... 8.1 High -
libssh2Debian libssh2 - regression update No score -
libssh2Debian A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive... 7.5 High -
libssh2Debian An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way... 7.3 High -
libssh2Debian An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a... 5.0 Medium -
libssh2Debian An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SFTP packets with... 5.0 Medium -
libssh2Debian An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require... 5.0 Medium -
libssh2Debian An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP... 5.0 Medium -
libssh2Debian An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2... 7.5 High -
libssh2Debian An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2... 7.5 High -
libssh2Debian An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2... 7.5 High -
libssh2Debian The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets... 5.9 Medium -
libssh2Debian The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of... 6.8 Medium