Описание
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.12.2-1 |
| esm-infra-legacy/xenial | needs-triage | |
| esm-infra/bionic | needs-triage | |
| esm-infra/focal | needs-triage | |
| jammy | released | 0.9.6-2ubuntu0.22.04.8 |
| noble | released | 0.10.6-2ubuntu0.5 |
| resolute | released | 0.11.3-1ubuntu2.1 |
| stonking | not-affected | 0.12.2-1 |
| upstream | released | 0.12.1-1 |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.
A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.
Libssh: libssh: integrity downgrade via openssl aes-gcm tag verification
A flaw was found in libssh. Incorrect AES-GCM finalization checks in b ...
EPSS
7.5 High
CVSS3