Поиск уязвимостей
Количество 23
Количество 23
ALT-PU-2021-1788
ALT-PU-2021-1788: package `libssh` update to version 0.9.5-alt1
SUSE-SU-2024:0539-1
Security update for libssh
SUSE-SU-2024:0525-1
Security update for libssh
CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
CVE-2020-16135
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buf ...
CVE-2020-1730
A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.
CVE-2020-1730
A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.
CVE-2020-1730
A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.
CVE-2020-1730
A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in t ...
RLSA-2021:4387
Low: libssh security update
GHSA-9j7p-fvvp-cp57
libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.
ELSA-2021-4387
ELSA-2021-4387: libssh security update (LOW)
BDU:2021-03730
Уязвимость компонента tftpserver.c библиотеки для аутентификации клиента libssh, связанная с ошибками разыменования указателя, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2020:0510-1
Security update for libssh
SUSE-SU-2020:0968-1
Security update for libssh
SUSE-SU-2020:0967-1
Security update for libssh
GHSA-6rh3-m266-5m77
A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.
BDU:2020-02135
Уязвимость библиотеки libssh, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-1788 ALT-PU-2021-1788: package `libssh` update to version 0.9.5-alt1 | CVSS3: 7.5 | больше 5 лет назад | |
 | SUSE-SU-2024:0539-1 Security update for libssh | больше 2 лет назад | ||
| SUSE-SU-2024:0525-1 Security update for libssh | больше 2 лет назад | ||
 | CVE-2020-16135 libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. | CVSS3: 5.9 | 4% Низкий | больше 6 лет назад |
 | CVE-2020-16135 libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. | CVSS3: 5.9 | 4% Низкий | больше 6 лет назад |
 | CVE-2020-16135 libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. | CVSS3: 5.9 | 4% Низкий | больше 6 лет назад |
| CVE-2020-16135 libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buf ... | CVSS3: 5.9 | 4% Низкий | больше 6 лет назад |
| CVE-2020-1730 A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability. | CVSS3: 5.3 | 3% Низкий | больше 6 лет назад |
| CVE-2020-1730 A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability. | CVSS3: 5.3 | 3% Низкий | больше 6 лет назад |
| CVE-2020-1730 A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability. | CVSS3: 5.3 | 3% Низкий | больше 6 лет назад |
| CVE-2020-1730 A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in t ... | CVSS3: 5.3 | 3% Низкий | больше 6 лет назад |
 | RLSA-2021:4387 Low: libssh security update | 4% Низкий | почти 5 лет назад | |
| GHSA-9j7p-fvvp-cp57 libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL. | CVSS3: 5.9 | 4% Низкий | больше 4 лет назад |
| ELSA-2021-4387 ELSA-2021-4387: libssh security update (LOW) | 4% Низкий | почти 5 лет назад | |
 | BDU:2021-03730 Уязвимость компонента tftpserver.c библиотеки для аутентификации клиента libssh, связанная с ошибками разыменования указателя, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.9 | 4% Низкий | больше 6 лет назад |
| openSUSE-SU-2020:0510-1 Security update for libssh | 3% Низкий | больше 6 лет назад | |
| SUSE-SU-2020:0968-1 Security update for libssh | 3% Низкий | больше 6 лет назад | |
| SUSE-SU-2020:0967-1 Security update for libssh | 3% Низкий | больше 6 лет назад | |
| GHSA-6rh3-m266-5m77 A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability. | CVSS3: 5.3 | 3% Низкий | больше 4 лет назад |
| BDU:2020-02135 Уязвимость библиотеки libssh, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 3% Низкий | больше 6 лет назад |
Уязвимостей на страницу