Skip to content
OpenAdvisories
Medium RLSA-2023:3839 2 CVEs

Moderate: libssh security update

Published Jul 8, 2023 · Updated Feb 5, 2026

Ecosystem: Rocky Linux

Summary

libssh is a library which implements the SSH protocol. It can be used to implement client and server applications.

Security Fix(es):

* libssh: NULL pointer dereference during rekeying with algorithm guessing (CVE-2023-1667)

* libssh: authorization bypass in pki_verify_data_signature (CVE-2023-2283)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 1

ReleasePackageFixed in
Rocky Linux · 8 libssh 0:0.9.6-10.el8_8

Vulnerabilities 2

  • Unscored —
    CVE-2023-1667

    A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authen…

    libssh libssh Debian Ubuntu
  • Unscored —
    CVE-2023-2283

    A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki…

    libssh libssh Debian Ubuntu

References

  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2182199
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2189736