libssh2 vulnerabilities (Wolfi)
29 vulnerabilities.
libssh2Wolfilibssh2 Heap Buffer Overflow via ETM Cipher Negotiation7.7 Highlibssh2Wolfilibssh2 Heap Out-of-Bounds Read via publickey subsystem7.7 Highlibssh2Wolfilibssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation8.7 Highlibssh2Wolfilibssh2 Double-Free Heap Corruption via sftp_open()8.7 Highlibssh2WolfiLibssh: libssh: authentication bypass via missing gssapi principal check8.8 Highlibssh2WolfiLibssh: libssh: use-after-free via data callbacks on closed channels4.3 Mediumlibssh2WolfiLibssh: libssh: denial of service via automatic certificate authentication loop3.1 Lowlibssh2WolfiLibssh: libssh: denial of service via sftp responses with unknown request ids5.3 Mediumlibssh2WolfiLibssh: libssh: integrity downgrade via openssl aes-gcm tag verification5.9 Mediumlibssh2WolfiLibssh: libssh: information disclosure via proxycommand %r username expansion3.9 Lowlibssh2WolfiLibssh: libssh: denial of service via oversized sftp read length6.5 Mediumlibssh2WolfiLibssh: libssh: denial of service via unchecked proxycommand fork() failure5.3 Mediumlibssh2WolfiLibssh: libssh: denial of service via zero advertised channel packet size6.5 Mediumlibssh2WolfiLibssh: libssh: information disclosure via short gssapi curve25519 public key3.7 Lowlibssh2WolfiLibssh: libssh: stack buffer overflow in sftp server longname construction6.7 Mediumlibssh2Wolfilibssh2 - Free of Uninitialized Pointer in publickey List Cleanup8.3 Highlibssh2Wolfilibssh2 - Integer Overflow in publickey Subsystem Attribute Allocation8.3 Highlibssh2WolfiNo scorelibssh2WolfiNo scorelibssh2Wolfilibssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c8.3 Highlibssh2Wolfilibssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c9.2 Criticallibssh2Wolfilibssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler8.2 Highlibssh2Wolfilibssh2 userauth.c userauth_password integer overflow6.9 Mediumlibssh2WolfiLibssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows7.8 Highlibssh2WolfiLibssh: invalid return code for chacha20 poly1305 with openssl backend8.1 Highlibssh2WolfiLibssh: out-of-bounds read in sftp_handle()5.4 Mediumlibssh2WolfiLibssh: missing checks for return values for digests3.7 Lowlibssh2WolfiPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumlibssh2WolfiProcessing sftp server read may cause null dereference3.1 Low