Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2015-1549

Высокий

ALT-PU-2015-1549: package libssh update to version 0.6.5-alt1

Источник
errata.altlinux.org
Дата публикации
17.06.2015
Дата обновления
17.06.2015
Устраненные уязвимости
2
ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades libssh to version 0.6.5-alt1.

Устраненные уязвимости2

Ссылки1

ALT-PU-2015-1549https://errata.altlinux.org/ALT-PU-2015-1549

Связанные уязвимости

ubuntu логотип

CVE-2014-8132

ubuntu
почти 12 лет назад

Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.

nvd логотип

CVE-2014-8132

nvd
почти 12 лет назад

Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.

debian логотип

CVE-2014-8132

debian
почти 12 лет назад

Double free vulnerability in the ssh_packet_kexinit function in kex.c ...

ubuntu логотип

CVE-2015-3146

CVSS3: 7.5
ubuntu
больше 10 лет назад

The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.

redhat логотип

CVE-2015-3146

redhat
больше 11 лет назад

The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted SSH packet.