CVE-2020-16135

Опубликовано: 29 июл. 2020

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

Ссылки

https://bugs.libssh.org/T232
Issue Tracking
Vendor Advisory
https://bugs.libssh.org/rLIBSSHe631ebb3e2247dd25e9678e6827c20dc73b73238
Exploit
Issue Tracking
Vendor Advisory
https://gitlab.com/libssh/libssh-mirror/-/merge_requests/120
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/07/msg00034.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCIKQRKXAAB4HMWM62EPZJ4DVBHIIEG6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNW5GBC6JFN76VEWQXMLT5F7VCZ5AJ2E/
https://security.gentoo.org/glsa/202011-05
Third Party Advisory
https://usn.ubuntu.com/4447-1/
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
Third Party Advisory
https://bugs.libssh.org/T232
Issue Tracking
Vendor Advisory
https://bugs.libssh.org/rLIBSSHe631ebb3e2247dd25e9678e6827c20dc73b73238
Exploit
Issue Tracking
Vendor Advisory
https://gitlab.com/libssh/libssh-mirror/-/merge_requests/120
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2020/07/msg00034.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FCIKQRKXAAB4HMWM62EPZJ4DVBHIIEG6/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNW5GBC6JFN76VEWQXMLT5F7VCZ5AJ2E/
https://security.gentoo.org/glsa/202011-05
Third Party Advisory
https://usn.ubuntu.com/4447-1/
Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libssh:libssh:0.9.4:*:*:*:*:*:*:*

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

Конфигурация 5

cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01782

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476

Связанные уязвимости

CVE-2020-16135

CVSS3: 5.9

ubuntu

больше 5 лет назад

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

CVE-2020-16135

CVSS3: 5.9

redhat

больше 5 лет назад

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

CVE-2020-16135

CVSS3: 5.9

debian

больше 5 лет назад

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buf ...

RLSA-2021:4387

rocky

около 4 лет назад

Low: libssh security update

GHSA-9j7p-fvvp-cp57

CVSS3: 5.9

github

больше 3 лет назад

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

EPSS

Процентиль: 82%

0.01782

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-476