REDHAT-BUG-2383220: Null Pointer Dereference
NULL Pointer Dereference vulnerability in the session ID calculation logic of the libssh library. The flaw arises from improper handling of allocation errors during cryptographic operations in the key exchange (KEX) phase. If a memory allocation fails, the resulting NULL pointer may be dereferenced, leading to a crash in both SSH clients and servers. This vulnerability can be exploited by a local attacker with limited privileges and no user interaction, potentially disrupting services that rely on libssh for secure communication.The issue affects libssh versions up to and including 0.11.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2383220?
The severity of REDHAT-BUG-2383220 is considered critical due to the potential for NULL pointer dereference leading to denial of service.
How do I fix REDHAT-BUG-2383220?
To fix REDHAT-BUG-2383220, upgrade to a version higher than libssh 0.11.2 that addresses the NULL pointer dereference vulnerability.
What software is affected by REDHAT-BUG-2383220?
The affected software for REDHAT-BUG-2383220 is libssh version 0.11.2 and earlier.
What could happen if REDHAT-BUG-2383220 is exploited?
Exploiting REDHAT-BUG-2383220 could lead to application crashes and service disruptions due to memory allocation failure.
Is REDHAT-BUG-2383220 a remote vulnerability?
Yes, REDHAT-BUG-2383220 can be exploited remotely, affecting systems that utilize the libssh library during key exchange.