Описание
A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.12.2-1 |
| esm-infra-legacy/xenial | needs-triage | |
| esm-infra/bionic | needs-triage | |
| esm-infra/focal | needs-triage | |
| jammy | released | 0.9.6-2ubuntu0.22.04.8 |
| noble | released | 0.10.6-2ubuntu0.5 |
| resolute | released | 0.11.3-1ubuntu2.1 |
| stonking | not-affected | 0.12.2-1 |
| upstream | released | 0.12.1-1 |
Показывать по
EPSS
7.5 High
CVSS3
Связанные уязвимости
A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.
A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data has already been freed, leading to crashes or possible use-after-free conditions.
Libssh: libssh: use-after-free via data callbacks on closed channels
A flaw was found in libssh. If data packets are processed after a chan ...
EPSS
7.5 High
CVSS3