Описание
A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.12.2-1 |
| esm-infra-legacy/xenial | not-affected | 0.12.0+ only |
| esm-infra/bionic | not-affected | 0.12.0+ only |
| esm-infra/focal | not-affected | 0.12.0+ only |
| jammy | not-affected | 0.12.0+ only |
| noble | not-affected | 0.12.0+ only |
| resolute | not-affected | 0.12.0+ only |
| upstream | released | 0.12.1-1 |
Показывать по
EPSS
5.3 Medium
CVSS3
Связанные уязвимости
A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.
A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 public key shorter than the expected length is copied without proper length validation, leading to an out-of-bounds heap read. This could allow a remote unauthenticated attacker to disclose small amounts of server memory.
A flaw was found in libssh. During server-side GSSAPI key exchange, a ...
EPSS
5.3 Medium
CVSS3