Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q35q-xwh9-8pgw

Опубликовано: 26 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.3

Описание

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

EPSS

Процентиль: 5%
0.00158
Низкий

3.3 Low

CVSS3

Дефекты

CWE-73

Связанные уязвимости

CVSS3: 3.3
ubuntu
4 месяца назад

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

CVSS3: 3.3
redhat
6 месяцев назад

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

CVSS3: 3.3
nvd
4 месяца назад

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.

CVSS3: 3.3
msrc
4 месяца назад

Libssh: libssh: denial of service via improper configuration file handling

CVSS3: 3.3
debian
4 месяца назад

A flaw was found in libssh where it can attempt to open arbitrary file ...

EPSS

Процентиль: 5%
0.00158
Низкий

3.3 Low

CVSS3

Дефекты

CWE-73