Lucene search

K

RedhatCVELIST:CVE-2023-1667

HistoryMay 26, 2023 - 12:00 a.m.

CVE-2023-1667

2023-05-2600:00:00

CWE-476

redhat

www.cve.org

2

null pointer dereference

libssh

re-keying

algorithm guessing

denial of service

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "libssh",
    "versions": [
      {
        "version": "libssh-2",
        "status": "affected"
      }
    ]
  }
]

References

www.libssh.org/security/advisories/CVE-2023-1667.txt

access.redhat.com/security/cve/CVE-2023-1667

bugzilla.redhat.com/show_bug.cgi?id=2182199

lists.debian.org/debian-lts-announce/2023/05/msg00029.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/27PD44ALQTZXX7K6JAM3BXBUHYA6DFFN/

security.gentoo.org/glsa/202312-05

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.7%

Related for CVELIST:CVE-2023-1667

redhatcve1 ibm11 nvd1 veracode1 prion1 ubuntucve1 cve1 debiancve1 osv7 fedora2 nessus35 redhat44 openvas22 oraclelinux2 cloudfoundry1 slackware1 rocky1 mageia1 ubuntu1 almalinux2 redos1 debian2 rosalinux1 gentoo1 photon3 hp1