Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-6918

Опубликовано: 19 дек. 2023
Источник: nvd
CVSS3: 3.7
CVSS3: 5.3
EPSS Низкий

Описание

A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*
Версия от 0.9.0 (включая) до 0.9.8 (исключая)
cpe:2.3:a:libssh:libssh:*:*:*:*:*:*:*:*
Версия от 0.10.0 (включая) до 0.10.6 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00373
Низкий

3.7 Low

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-252
CWE-252

Связанные уязвимости

CVSS3: 3.7
ubuntu
больше 1 года назад

A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.

CVSS3: 3.7
redhat
больше 1 года назад

A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.

CVSS3: 5.3
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 3.7
debian
больше 1 года назад

A flaw was found in the libssh implements abstract layer for message d ...

CVSS3: 3.7
github
больше 1 года назад

A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.

EPSS

Процентиль: 58%
0.00373
Низкий

3.7 Low

CVSS3

5.3 Medium

CVSS3

Дефекты

CWE-252
CWE-252