CVE-2023-1667

2023-05-2618:15:10

Debian Security Bug Tracker

security-tracker.debian.org

cve-2023-1667

algorithm guessing

authenticated client

denial of service

unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.2%

JSON

A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.

OSVersionArchitecturePackageVersionFilename
Debian12alllibssh< 0.10.5-1libssh_0.10.5-1_all.deb
Debian11alllibssh< 0.9.7-0+deb11u1libssh_0.9.7-0+deb11u1_all.deb
Debian999alllibssh< 0.10.5-1libssh_0.10.5-1_all.deb
Debian13alllibssh< 0.10.5-1libssh_0.10.5-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libssh	< 0.10.5-1	libssh_0.10.5-1_all.deb
Debian	11	all	libssh	< 0.9.7-0+deb11u1	libssh_0.9.7-0+deb11u1_all.deb
Debian	999	all	libssh	< 0.10.5-1	libssh_0.10.5-1_all.deb
Debian	13	all	libssh	< 0.10.5-1	libssh_0.10.5-1_all.deb