Summary
It was discovered that libssh incorrectly handled certain kexinit packets.
A remote attacker could possibly use this issue to cause libssh to crash,
resulting in a denial of service.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | libssh | 0.6.1-0ubuntu3.1 |
Vulnerabilities 1
-
Unscored —
Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows rem…
References
-
report
https://ubuntu.com/security/CVE-2014-8132