CVE-2012-4561: Medium severity libssh vulnerability
Florian Weimer of the Red Hat Product Security Team reported the existence of several unitialized heap allocations in the following functions:
keys.c:publickeymakedss() (key) keys.c:publickeymakersa() (key) keys.c:signaturefromstring() (sign) keys.c:sshdosign() (sign) keys.c:sshsignsessionid() (sign)
This could lead to freeing an invalid pointer on an error path, which could lead to a crash in the process using libssh.
Other sources
The (1) publickeymakedss, (2) publickeymakersa, (3) signaturefromstring, (4) sshdosign, and (5) sshsignsessionid functions in keys.c in libssh before 0.5.3 free "an invalid pointer on an error path," which might allow remote attackers to cause a denial of service (crash) via unspecified vectors.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-4561?
CVE-2012-4561 is classified as a moderate severity vulnerability due to potential impacts from uninitialized heap allocations.
How do I fix CVE-2012-4561?
To fix CVE-2012-4561, update libssh to version 0.5.3 or later.
What software is affected by CVE-2012-4561?
CVE-2012-4561 affects versions of libssh up to 0.5.2 and specific versions like 0.4.7, 0.4.8, 0.5.0, and 0.5.1.
What types of functions are involved in CVE-2012-4561?
CVE-2012-4561 involves uninitialized heap allocations in various public key and signing functions within libssh.
Who reported CVE-2012-4561?
CVE-2012-4561 was reported by Florian Weimer of the Red Hat Product Security Team.