Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q35q-xwh9-8pgw

Опубликовано: 26 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

EPSS

Процентиль: 3%
0.00014
Низкий

3.3 Low

CVSS3

Дефекты

CWE-73

Связанные уязвимости

ubuntu
около 2 месяцев назад

[Denial of Service via improper configuration file handling]

CVSS3: 3.3
redhat
около 2 месяцев назад

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

debian

[Denial of Service via improper configuration file handling]

suse-cvrf
27 дней назад

Security update for libssh

suse-cvrf
27 дней назад

Security update for libssh

EPSS

Процентиль: 3%
0.00014
Низкий

3.3 Low

CVSS3

Дефекты

CWE-73