CVE-2020-1730: Null Pointer Dereference
First published: Thu Apr 09 2020(Updated: )
A flaw was found in libssh versions before 0.8.9 and before 0.9.4 in the way it handled AES-CTR (or DES ciphers if enabled) ciphers. The server or client could crash when the connection hasn't been fully initialized and the system tries to cleanup the ciphers when closing the connection. The biggest threat from this vulnerability is system availability.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Libssh Libssh | >=0.8.0<0.8.9 | |
| Libssh Libssh | >=0.9.0<0.9.4 | |
| Netapp Cloud Backup | ||
| Canonical Ubuntu Linux | =18.04 | |
| Canonical Ubuntu Linux | =19.10 | |
| Fedoraproject Fedora | =31 | |
| Fedoraproject Fedora | =32 | |
| Redhat Enterprise Linux | =8.0 | |
| Oracle Mysql Workbench | <=8.0.21 | |
| ubuntu/libssh | <0.8.0~20170825.94 | 0.8.0~20170825.94 |
| ubuntu/libssh | <0.9.0-1ubuntu1.4 | 0.9.0-1ubuntu1.4 |
| ubuntu/libssh | <0.8.9<0.9.4 | 0.8.9 0.9.4 |
| debian/libssh | 0.8.7-1+deb10u1 0.8.7-1+deb10u2 0.9.8-0+deb11u1 0.10.6-0+deb12u1 0.10.6-2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1730
- https://www.libssh.org/security/advisories/CVE-2020-1730.txt
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VLSWHBQ3EPKGTGLQNH554Z746BJ3C554/
- https://usn.ubuntu.com/4327-1/
- https://security.netapp.com/advisory/ntap-20200424-0001/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2A7BIFKUYIYKTY7FX4BEWVC2OHS5DPOU/
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://launchpad.net/bugs/cve/CVE-2020-1730
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2A7BIFKUYIYKTY7FX4BEWVC2OHS5DPOU/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VLSWHBQ3EPKGTGLQNH554Z746BJ3C554/
- https://bugs.libssh.org/T213
- https://git.libssh.org/projects/libssh.git/commit/?id=84a85803b4c83b8dac03b0d0aba58b48c98253e6
- https://git.libssh.org/projects/libssh.git/commit/?id=b36272eac1b36982598c10de7af0a501582de07a
- https://security-tracker.debian.org/tracker/CVE-2020-1730
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1730
- https://ubuntu.com/security/notices/USN-4327-1
- https://nvd.nist.gov/vuln/detail/CVE-2020-1730
- https://ubuntu.com/security/CVE-2020-1730
Frequently Asked Questions
What is CVE-2020-1730?
CVE-2020-1730 is a vulnerability in libssh versions before 0.8.9 and before 0.9.4 that could cause a crash when closing the connection.
How severe is CVE-2020-1730?
CVE-2020-1730 has a severity score of 5.3, which is considered medium severity.
Which software is affected by CVE-2020-1730?
CVE-2020-1730 affects libssh versions before 0.8.9 and before 0.9.4, as well as Netapp Cloud Backup, Canonical Ubuntu Linux 18.04 and 19.10, Fedora 31 and 32, Redhat Enterprise Linux 8.0, and Oracle Mysql Workbench 8.0.21.
How can I fix CVE-2020-1730?
To fix CVE-2020-1730, update libssh to version 0.8.9 or 0.9.4 if you are using it, and apply any available patches or updates for the affected software listed in the vulnerability description.
Where can I find more information about CVE-2020-1730?
You can find more information about CVE-2020-1730 in the references provided: [link 1], [link 2], [link 3].
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/launchpad-cve
- source/Launchpad
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-index
- collector/security-tracker-debian
- source/Debian
- collector/usn-cve
- source/Ubuntu
- vendor/libssh
- canonical/libssh libssh
- version/libssh libssh/0.8.0
- version/libssh libssh/0.9.0
- vendor/netapp
- canonical/netapp cloud backup
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/18.04
- version/canonical ubuntu linux/19.10
- vendor/fedoraproject
- canonical/fedoraproject fedora
- version/fedoraproject fedora/31
- version/fedoraproject fedora/32
- vendor/redhat
- canonical/redhat enterprise linux
- version/redhat enterprise linux/8.0
- vendor/oracle
- canonical/oracle mysql workbench
- version/oracle mysql workbench/8.0.21
- package-manager/debian
- package-manager/ubuntu