Low ELSA-2021-4387 1 CVE

Low: libssh security update (Oracle Linux 8)

Published Nov 16, 2021 · Updated Nov 16, 2021

Ecosystem: Oracle Linux

Summary

[0.9.4-3]
- Fix CVE-2020-16135 NULL pointer dereference in sftpserver.c if
ssh_buffer_new returns NULL (#1862646)

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 8	libssh	0:0.9.4-3.el8
Oracle Linux · 8	libssh-config	0:0.9.4-3.el8
Oracle Linux · 8	libssh-devel	0:0.9.4-3.el8

Vulnerabilities 1

Unscored —

CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

libssh libssh libssh Debian Ubuntu Alpine

Jul 29, 2020