All products

Red Hat Enterprise Linux 7/libssh

Red Hat · Package
8 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka TerrapinCVE-2023-48795 · GHSA-45X7-PX36-X8W8Version ranges need review. russhgolang.org/x/crypto Rust / CargoGoPyPIRed Hat Medium Fix reported
libssh: null pointer dereference due to a logical error in the handling of a SSH_MSG_NEWKEYS and KEXDH_REPLY packetsCVE-2015-3146 Red Hat Enterprise Linux 7/libssh Red Hat Medium No fix reported
libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULLCVE-2020-16135 Red Hat Enterprise Linux 7/libssh Red Hat Low No fix reported
libssh: possible heap-based buffer overflow when rekeyingCVE-2021-3634 Red Hat Enterprise Linux 7/libsshRed Hat Virtualization 4/libssh Red Hat Low No fix reported
libssh: NULL pointer dereference during rekeying with algorithm guessingCVE-2023-1667 Red Hat Enterprise Linux 7/libssh Red Hat Medium No fix reported
libssh: authorization bypass in pki_verify_data_signatureCVE-2023-2283 CloudForms Management Engine 5/libssh2Red Hat Enterprise Linux 6/libssh2 Red Hat Medium No fix reported
libssh: Missing checks for return values for digestsCVE-2023-6918 Red Hat Enterprise Linux 6/libssh2Red Hat Enterprise Linux 7/libssh2 Red Hat Low No fix reported
libssh: ProxyCommand/ProxyJump features allow injection of malicious code through hostnameCVE-2023-6004 Red Hat Enterprise Linux 7/libssh Red Hat Low No fix reported