REDHAT-BUG-2433121: Medium severity OpenSSH OpenSSH vulnerability
The API function sshgethexa() is vulnerable, when 0-lenght input is provided to this function. This function is used internally in sshgetfingerprinthash() and sshprinthexa() (deprecated), which is vulnerable to the same input (length is provided by the calling application).
The function is also used internally in the gssapi code for logging the OIDs received by the server during GSSAPI authentication. This could be triggered remotely, when the server allows GSSAPI authentication and logging verbosity is set at least to SSHLOGPACKET (3). This could cause self-DoS of the per-connection daemon process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2433121?
The severity of REDHAT-BUG-2433121 is considered to be high due to the potential for input validation issues leading to vulnerabilities.
How do I fix REDHAT-BUG-2433121?
To fix REDHAT-BUG-2433121, ensure you are using the updated version of OpenSSH that addresses this vulnerability.
What software is affected by REDHAT-BUG-2433121?
OpenSSH is the software affected by REDHAT-BUG-2433121, specifically vulnerable through the usage of the `ssh_get_hexa()` function.
Can REDHAT-BUG-2433121 be exploited remotely?
Yes, REDHAT-BUG-2433121 can potentially be exploited remotely, depending on how the affected functions are invoked in an application.
What are the potential consequences of REDHAT-BUG-2433121?
The potential consequences of REDHAT-BUG-2433121 include unauthorized access or data leakage due to flawed input handling.