Unscored DSA-2577-1 4 CVEs

libssh - several

Published Dec 1, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 6.0	libssh	0.4.5-3+squeeze1

Vulnerabilities 4

Unscored —

CVE-2012-4559

Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in ch…

libssh Debian

Nov 30, 2012
Unscored —

CVE-2012-4561

The (1) publickey_make_dss, (2) publickey_make_rsa, (3) signature_from_string, (4) ssh_do_sign, and (5) ssh_sign_sessio…

libssh Debian

Nov 30, 2012
Unscored —

CVE-2012-4562 EPSS 13%

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or…

libssh Debian

Nov 30, 2012
Unscored —

CVE-2012-6063

Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause …

libssh Debian

Nov 30, 2012