Multiple vulnerabilities have been discovered in libssh, the worst of which could lead to code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/libssh | * | < 0.10.6 | >= 0.10.6 |
libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side.
Multiple vulnerabilities have been discovered in libssh. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All libssh users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.10.6"
Multiple vulnerabilities have been discovered in libssh, the worst of which could lead to remote code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/libssh | * | < 0.10.5 | >= 0.10.5 |
libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side.
Multiple vulnerabilities have been discovered in libssh. Please review the CVE identifiers referenced below for details.
Please review the referenced CVE identifiers for details.
There is no known workaround at this time.
All libssh users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.10.5"
A vulnerability in libssh could lead to a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/libssh | * | < 0.9.5 | >= 0.9.5 |
libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side.
libssh was found to have a NULL pointer dereference in tftpserver.c if the function ssh_buffer_new returns NULL.
An attacker could cause a possible Denial of Service condition.
There is no known workaround at this time.
All libssh users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.9.5"
A vulnerability in libssh could allow a remote attacker to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/libssh | * | < 0.9.4 | >= 0.9.4 |
libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side.
It was discovered that libssh could crash when AES-CTR ciphers are used.
A remote attacker running a malicious client or server could possibly crash the counterpart implemented with libssh and cause a Denial of Service condition.
Disable AES-CTR ciphers. If you implement a server using libssh it is recommended to use a prefork model so each session runs in an own process.
All libssh users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.9.4"
A vulnerability in libssh could allow a remote attacker to execute arbitrary commands.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/libssh | * | < 0.9.3 | >= 0.9.3 |
libssh is a multiplatform C library implementing the SSHv2 protocol on client and server side.
It was discovered that libssh incorrectly handled certain scp commands.
A remote attacker could trick a victim into using a specially crafted scp command, possibly resulting in the execution of arbitrary commands on the server.
There is no known workaround at this time.
All libssh users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.9.3"
Multiple vulnerabilities have been found in libssh and libssh2, the worst of which allows remote attackers to cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/libssh | * | < 0.7.3 | >= 0.7.3 |
| net-libs/libssh2 | * | < 1.7.0 | >= 1.7.0 |
libssh is a mulitplatform C library implementing the SSHv2 and SSHv1 protocol on client and server side.
libssh and libssh2 both have a bits/bytes confusion bug and generate an abnormaly short ephemeral secret for the diffie-hellman-group1 and diffie-hellman-group14 key exchange methods. The resulting secret is 128 bits long, instead of the recommended sizes of 1024 and 2048 bits respectively.
Additionally, a double free on dangling pointers in initial key exchange packets within libssh could leave dangling pointers in the session crypto structures. It is possible to send a malicious kexinit package to eventually cause a server to do a double-free before this fix. This could be used for a Denial of Service attack.
Remote attackers may gain access to confidential information due to the short keysize generated by libssh and libssh2, or cause a Denial of Service condition.
There is no known workaround at this time.
All libssh users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.7.3"
All libssh2 users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh2-1.7.0"
A vulnerability in LibSSH can result in leakage of private key information.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/libssh | * | < 0.6.3 | >= 0.6.3 |
LibSSH is a C library providing SSHv2 and SSHv1.
A new connection inherits the state of the PRNG without re-seeding with random data.
Servers using ECC (ECDSA) or DSA certificates in non-deterministic mode may under certain conditions leak their private key.
There is no known workaround at this time.
All LibSSH users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.6.3"
Multiple vulnerabilities have been found in libssh, allowing attackers to execute arbitrary code or cause Denial of Service.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| net-libs/libssh | * | < 0.5.3 | >= 0.5.3 |
libssh is a C library providing SSHv2 and SSHv1.
Multiple buffer overflow, double free, and integer overflow vulnerabilities have been discovered in libssh.
A remote attacker could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All libssh users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=net-libs/libssh-0.5.3"