Filter
Software
ubuntu/libsshA vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A m…
9.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
libssh libsshThe authentication check of the connecting client can be bypassed in the function `pki_verify_data_s…
6.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Fedoraproject FedoraThe SSH protocol keeps track of two shared secrets during the lifetime of the session. One of them i…
6.5
First published (updated )
libsshProcessing sftp server read may cause null dereference
6.5
First published (updated )
Red Hat OpenStack PlatformImpact of Terrapin SSH Attack
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/libsshLibssh: missing checks for return values for digests
5.3
EPSS
0.06%
First published (updated )
libsshThe (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and …
First published (updated )
redhat/libsshLibssh: proxycommand/proxyjump features allow injection of malicious code through hostname
4.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
libsshThe RAND_bytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the…
1.9
First published (updated )
CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)
First published (updated )
CVE-2023-48795: Prefix Truncation Attacks in SSH Specification (Terrapin Attack)
First published (updated )
CVE-2023-51385, CVE-2023-6004: OpenSSH, libssh: Security weakness in ProxyCommand handling
First published (updated )