REDHAT-BUG-2498181: Medium severity libssh vulnerability
A flaw was found in libssh client-side SFTP message handling. In sftpgetmessage() in src/sftpcommon.c, SFTP responses carrying unknown request IDs were accepted and kept queued instead of being rejected. A malicious SFTP server can repeatedly send responses for request IDs that were never issued by the client, causing unbounded growth of queued messages and leading to client-side memory exhaustion and denial of service.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2498181?
The severity of REDHAT-BUG-2498181 is classified as medium (4).
How do I fix REDHAT-BUG-2498181?
To fix REDHAT-BUG-2498181, update the libssh package to the latest version that includes the security patch addressing this flaw.
What specific issue does REDHAT-BUG-2498181 address?
REDHAT-BUG-2498181 addresses a flaw in libssh's client-side SFTP message handling, allowing acceptance of unknown request IDs.
Who can be affected by REDHAT-BUG-2498181?
Users of the libssh library, particularly those utilizing SFTP functionality, can be affected by REDHAT-BUG-2498181.
What is the potential impact of REDHAT-BUG-2498181?
The potential impact of REDHAT-BUG-2498181 includes the risk of a malicious SFTP server sending unauthorized responses that could compromise the system.