DeutschShown in its original language — a full translation is planned for a future version.
libssh: Mehrere Schwachstellen
view advisory published 2016-02-23
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in libssh und Ubuntu Linux ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmechanismen zu umgehen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-0739US | medium5.9 | — | ||
libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes… | ||||
| CVE-2015-3146US | high7.5 | — | ||
The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not properly validate state, which allows remote attackers to cause a… | ||||
02
references
External citations — patches, advisories, analysis.
- Ubuntu Security Notice USN-2912-1 vom 2016-02-23external
- Red Hat Bugzilla Bug 1305971 vom 2016-02-24external
- Red Hat Security Advisory RHSA-2016:0566-1 vom 2016-04-01external
- WID-SEC-W-2024-1054 - CSAF Versionself
- WID-SEC-2024-1054 - Portal Versionself
- Dell Security Advisory DSA-2024-198 vom 2024-05-08external
- Security and Bugfix Release libssh 0.7.3 vom 2016-02-23external
- SUSE Security Update SUSE-SU-2016:0622-1 vom 2016-03-01external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan