rpm package
opensuse/libssh2_org&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/libssh2_org&distro=openSUSE%20Tumbleweed
Vulnerabilities (23)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2019-3859 | Cri | 9.1 | < 1.9.0-3.6 | 1.9.0-3.6 | Mar 21, 2019 | An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory. | |
| CVE-2016-0787 | Med | 5.9 | < 1.7.0-1.5 | 1.7.0-1.5 | Apr 13, 2016 | The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug." | |
| CVE-2015-1782 | — | < 1.7.0-1.5 | 1.7.0-1.5 | Mar 13, 2015 | The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet. |
- affected < 1.9.0-3.6fixed 1.9.0-3.6
An out of bounds read flaw was discovered in libssh2 before 1.8.1 in the _libssh2_packet_require and _libssh2_packet_requirev functions. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.
- affected < 1.7.0-1.5fixed 1.7.0-1.5
The diffie_hellman_sha256 function in kex.c in libssh2 before 1.7.0 improperly truncates secrets to 128 or 256 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
- CVE-2015-1782Mar 13, 2015affected < 1.7.0-1.5fixed 1.7.0-1.5
The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.
Page 2 of 2