https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:31:22 +0000 https://cve.radiocsirt.org/vuln/alsa-2024:2504 <p><strong>Affected:</strong> AlmaLinux:9: libssh, AlmaLinux:9: libssh-config, AlmaLinux:9: libssh-devel</p> <p>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.</p> <p>Security Fix(es):</p> <p>* libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004) * libssh: Missing checks for return values for digests (CVE-2023-6918)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: libssh, AlmaLinux:9: libssh-config, AlmaLinux:9: libssh-devel</p> <p>libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.</p> <p>Security Fix(es):</p> <p>* libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (CVE-2023-6004) * libssh: Missing checks for return values for digests (CVE-2023-6918)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2024:2504 https://cve.radiocsirt.org/vuln/bdu:2024-00200 bdu:2024-00200 https://cve.radiocsirt.org/vuln/bdu:2024-00200 https://cve.radiocsirt.org/vuln/bell-cve-2023-6918 <p><strong>Affected:</strong> Alpaquita:23: libssh, Alpaquita:stream: libssh</p> <p><strong>Affected:</strong> Alpaquita:23: libssh, Alpaquita:stream: libssh</p> https://cve.radiocsirt.org/vuln/bell-cve-2023-6918 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0579 https://cve.radiocsirt.org/vuln/euvd-2026-261611 EUVD-2026-261611 https://cve.radiocsirt.org/vuln/euvd-2026-261611 https://cve.radiocsirt.org/vuln/fkie_cve-2023-6918 <p>A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.</p> <p>A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-6918 https://cve.radiocsirt.org/vuln/ghsa-gpcj-wh2f-rr23 <p>A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.</p> <p>A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.</p> https://cve.radiocsirt.org/vuln/ghsa-gpcj-wh2f-rr23 https://cve.radiocsirt.org/vuln/gsd-2023-6918 gsd-2023-6918 https://cve.radiocsirt.org/vuln/gsd-2023-6918 https://cve.radiocsirt.org/vuln/msrc_cve-2023-6918 msrc_CVE-2023-6918 https://cve.radiocsirt.org/vuln/msrc_cve-2023-6918 https://cve.radiocsirt.org/vuln/oesa-2024-1040 <p><strong>Affected:</strong> openEuler:22.03-LTS: libssh</p> <p>The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl). Security Fix(es): A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.(CVE-2023-6004) A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.(CVE-2023-6918)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: libssh</p> <p>The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl). Security Fix(es): A flaw was found in libssh. By utilizing the ProxyCommand or ProxyJump feature, users can exploit unchecked hostname syntax on the client. This issue may allow an attacker to inject malicious code into the command of the features mentioned through the hostname parameter.(CVE-2023-6004) A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.(CVE-2023-6918)</p> https://cve.radiocsirt.org/vuln/oesa-2024-1040 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13638-1 <p>libssh-config-0.10.6-1.1 on GA media</p> <p>libssh-config-0.10.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13638-1 https://cve.radiocsirt.org/vuln/suse-su-2024:0525-1 <p>Security update for libssh</p> <p>Security update for libssh</p> https://cve.radiocsirt.org/vuln/suse-su-2024:0525-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6918 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libssh, Ubuntu:Pro:18.04:LTS: libssh, Ubuntu:20.04:LTS: libssh, Ubuntu:22.04:LTS: libssh</p> <p>A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: libssh, Ubuntu:Pro:18.04:LTS: libssh, Ubuntu:20.04:LTS: libssh, Ubuntu:22.04:LTS: libssh</p> <p>A flaw was found in the libssh implements abstract layer for message digest (MD) operations implemented by different supported crypto backends. The return values from these were not properly checked, which could cause low-memory situations failures, NULL dereferences, crashes, or usage of the uninitialized memory as an input for the KDF. In this case, non-matching keys will result in decryption/integrity failures, terminating the connection.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-6918 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3175 <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service zu verursachen</p> <p>Ein lokaler Angreifer kann mehrere Schwachstellen in libssh ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service zu verursachen</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-3175