Unscored USN-4447-1 1 CVE

libssh vulnerability

Published Aug 4, 2020 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

It was discovered that libssh incorrectly handled certain requests.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 16.04 LTS 16.04:LTS	libssh	0.6.3-4.3ubuntu0.6
Ubuntu · 18.04 LTS 18.04:LTS	libssh	0.8.0~20170825.94fa1e38-1ubuntu0.7
Ubuntu · 20.04 LTS 20.04:LTS	libssh	0.9.3-2ubuntu2.1

Vulnerabilities 1

Unscored —

CVE-2020-16135

libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns NULL.

libssh libssh libssh Debian Ubuntu Alpine

Jul 29, 2020

References

report
https://ubuntu.com/security/CVE-2020-16135