Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2023:3738-1

Опубликовано: 22 сент. 2023
Источник: suse-cvrf

Описание

Security update for libssh2_org

This update for libssh2_org fixes the following issues:

  • CVE-2020-22218: Fixed a bug in _libssh2_packet_add() which allows to access out of bounds memory. (bsc#1214527)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
libssh2-1-1.4.3-26.5.1
libssh2-1-32bit-1.4.3-26.5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
libssh2-1-1.4.3-26.5.1
libssh2-1-32bit-1.4.3-26.5.1
SUSE Linux Enterprise Software Development Kit 12 SP5
libssh2-devel-1.4.3-26.5.1

Описание

An issue was discovered in function _libssh2_packet_add in libssh2 1.10.0 allows attackers to access out of bounds memory.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:libssh2-1-1.4.3-26.5.1
SUSE Linux Enterprise Server 12 SP5:libssh2-1-32bit-1.4.3-26.5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-1.4.3-26.5.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5:libssh2-1-32bit-1.4.3-26.5.1

Ссылки