Описание
The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 0.5.3-1ubuntu1 |
| hardy | ignored | end of life |
| lucid | released | 0.4.2-1ubuntu1.2 |
| oneiric | released | 0.5.2-1ubuntu0.11.10.2 |
| precise | released | 0.5.2-1ubuntu0.12.04.2 |
| quantal | released | 0.5.2-1ubuntu0.12.10.2 |
| upstream | released | 0.5.4 |
Показывать по
EPSS
4.3 Medium
CVSS2
Связанные уязвимости
The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.
The publickey_from_privatekey function in libssh before 0.5.4, when no ...
The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.
ALT-PU-2014-1028: package `libssh` update to version 0.5.5-alt1
EPSS
4.3 Medium
CVSS2