libssh2 vulnerabilities (Red Hat)
37 vulnerabilities.
-
libssh2Red Hat libssh2 Heap Buffer Overflow via ETM Cipher Negotiation 7.7 High -
libssh2Red Hat libssh2 Heap Out-of-Bounds Read via publickey subsystem 7.7 High -
libssh2Red Hat libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation 8.7 High -
libssh2Red Hat libssh2 Double-Free Heap Corruption via sftp_open() 8.7 High -
libssh2Red Hat libssh2 - Free of Uninitialized Pointer in publickey List Cleanup 8.3 High -
libssh2Red Hat libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation 8.3 High -
libssh2Red Hat libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c 8.3 High -
libssh2Red Hat libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c 9.2 Critical -
libssh2Red Hat libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler 8.2 High -
libssh2Red Hat libssh2 userauth.c userauth_password integer overflow 6.9 Medium -
libssh2Red Hat An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to... 7.5 High -
libssh2Red Hat An out-of-bounds read/write access flaw was found in the USB emulator of the QEMU in versions... 5.0 Medium -
libssh2Red Hat An out-of-bounds heap buffer access flaw was found in the way the iSCSI Block driver in QEMU... 7.7 High -
libssh2Red Hat In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a... 5.6 Medium -
libssh2Red Hat tcp_emu in tcp_subr.c in libslirp 4.1.0, as used in QEMU 4.2.0, mismanages memory, as... 5.6 Medium -
libssh2Red Hat Possible Information Leak / Session Hijack Vulnerability in Rack 6.3 Medium -
libssh2Red Hat In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer... 8.1 High -
libssh2Red Hat ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet... 8.8 High -
libssh2Red Hat The virConnectBaselineHypervisorCPU() and virConnectCompareHypervisorCPU() libvirt APIs, 4.x.x... 8.8 High -
libssh2Red Hat The virConnectGetDomainCapabilities() libvirt API, versions 4.x.x before 4.10.1 and 5.x.x before... 8.8 High -
libssh2Red Hat It was discovered that libvirtd, versions 4.x.x before 4.10.1 and 5.x.x before 5.4.1, would... 7.8 High -
libssh2Red Hat It was discovered that libvirtd before versions 4.10.1 and 5.4.1 would permit read-only clients... 8.8 High -
libssh2Red Hat A vulnerability was found in libvirt >= 4.1.0 in the virtlockd-admin.socket and virtlogd-admin... 8.8 High -
libssh2Red Hat Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some... 5.6 Medium -
libssh2Red Hat Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors... 5.6 Medium -
libssh2Red Hat Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing... 5.6 Medium -
libssh2Red Hat Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors... 5.6 Medium -
libssh2Red Hat A flaw was found in libssh2 before 1.8.1. A server could send a multiple keyboard interactive... 7.5 High -
libssh2Red Hat An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way... 7.3 High -
libssh2Red Hat An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the way SSH packets with a... 5.0 Medium -
libssh2Red Hat An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP... 5.0 Medium -
libssh2Red Hat An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2... 7.5 High -
libssh2Red Hat An integer overflow flaw, which could lead to an out of bounds write, was discovered in libssh2... 7.5 High -
libssh2Red Hat An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2... 7.5 High -
libssh2Red Hat In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which... 9.8 Critical -
libssh2Red Hat The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets... 5.9 Medium -
libssh2Red Hat The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of... 6.8 Medium