Skip to content
OpenAdvisories
Unscored USN-6138-1 2 CVEs

libssh vulnerabilities

Published Jun 5, 2023 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

Philip Turnbull discovered that libssh incorrectly handled rekeying with
algorithm guessing. A remote attacker could use this issue to cause libssh
to crash, resulting in a denial of service, or possibly execute arbitrary
code. (CVE-2023-1667)

Kevin Backhouse discovered that libssh incorrectly handled verifying data
signatures. A remote attacker could possibly use this issue to bypass
authorization. (CVE-2023-2283)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libssh 0.9.3-2ubuntu2.3
Ubuntu · 22.04 LTS 22.04:LTS libssh 0.9.6-2ubuntu0.22.04.1

Vulnerabilities 2

  • Unscored —
    CVE-2023-1667

    A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authen…

    libssh libssh Debian Ubuntu
  • Unscored —
    CVE-2023-2283

    A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki…

    libssh libssh Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-1667
  • report
    https://ubuntu.com/security/CVE-2023-2283