CVE-2012-4560: Buffer Overflow
Florian Weimer of the Red Hat Product Security Team reported two cases where a function in libssh would write one past the end of the buffer (the u buffer in misc.c:sshpathexpandtilde() and the buf buffer in misc.c:sshpathexpandescape()).
Other sources
Multiple buffer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4560?
CVE-2012-4560 has a severity rating that suggests potential exploitation could lead to critical security risks due to multiple buffer overflows.
How do I fix CVE-2012-4560?
To fix CVE-2012-4560, you should upgrade libssh to version 0.5.3 or later.
Which versions of libssh are affected by CVE-2012-4560?
CVE-2012-4560 affects libssh versions prior to 0.5.3, including versions 0.4.7, 0.4.8, 0.5.0, 0.5.0-rc1, and 0.5.1.
What types of vulnerabilities does CVE-2012-4560 encompass?
CVE-2012-4560 encompasses multiple buffer overflow vulnerabilities in certain functions of libssh.
Who reported CVE-2012-4560?
CVE-2012-4560 was reported by Florian Weimer of the Red Hat Product Security Team.