Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

openSUSE-SU-2020:0510-1

Опубликовано: 12 апр. 2020
Источник: suse-cvrf

Описание

Security update for libssh

This update for libssh fixes the following issues:

  • CVE-2020-1730: Fixed a possible denial of service when using AES-CTR (bsc#1168699).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Список пакетов

openSUSE Leap 15.1
libssh-devel-0.8.7-lp151.2.12.1
libssh4-0.8.7-lp151.2.12.1
libssh4-32bit-0.8.7-lp151.2.12.1

Ссылки

Описание

A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.

Затронутые продукты
openSUSE Leap 15.1:libssh-devel-0.8.7-lp151.2.12.1
openSUSE Leap 15.1:libssh4-0.8.7-lp151.2.12.1
openSUSE Leap 15.1:libssh4-32bit-0.8.7-lp151.2.12.1
Ссылки