Lucene search
UbuntuUSN-2145-1HistoryMar 12, 2014 - 12:00 a.m.
libssh vulnerability
2014-03-1200:00:00
ubuntu.com
44
CVSS2
1.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
Releases
- Ubuntu 13.10
- Ubuntu 12.10
- Ubuntu 12.04
Packages
- libssh - A tiny C SSH library
Details
Aris Adamantiadis discovered that libssh allowed the OpenSSL PRNG state to
be reused when implementing forking servers. This could allow an attacker
to possibly obtain information about the state of the PRNG and perform
cryptographic attacks.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 13.10 | noarch | libssh-4 | <Β 0.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libssh-dbg | <Β 0.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 13.10 | noarch | libssh-dev | <Β 0.5.4-1ubuntu0.1 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libssh-4 | <Β 0.5.2-1ubuntu0.12.10.3 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libssh-dbg | <Β 0.5.2-1ubuntu0.12.10.3 | UNKNOWN |
| Ubuntu | 12.10 | noarch | libssh-dev | <Β 0.5.2-1ubuntu0.12.10.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-4 | <Β 0.5.2-1ubuntu0.12.04.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-dbg | <Β 0.5.2-1ubuntu0.12.04.3 | UNKNOWN |
| Ubuntu | 12.04 | noarch | libssh-dev | <Β 0.5.2-1ubuntu0.12.04.3 | UNKNOWN |
References
Related
debiancve
debiancve
CVE-2014-0017
2014-03-14 15:55:05
altlinux
altlinux
Security fix for the ALT Linux 8 package libssh version 0.6.3-alt1
2014-03-25 00:00:00
Security fix for the ALT Linux 7 package libssh version 0.6.3-alt1
2014-03-25 00:00:00
Security fix for the ALT Linux 9 package libssh version 0.6.3-alt1
2014-03-25 00:00:00
gentoo
gentoo
LibSSH: Information disclosure
2014-08-10 00:00:00
nessus
nessus
GLSA-201408-03 : LibSSH: Information disclosure
2014-08-11 00:00:00
openSUSE Security Update : libssh (openSUSE-SU-2014:0366-1)
2014-06-13 00:00:00
Fedora 20 : libssh-0.6.3-1.fc20 (2014-3473)
2014-03-07 00:00:00
fedora
fedora
[SECURITY] Fedora 19 Update: libssh-0.6.3-1.fc19
2014-03-15 15:21:52
[SECURITY] Fedora 20 Update: libssh-0.6.3-1.fc20
2014-03-07 06:38:59
[SECURITY] Fedora 20 Update: libssh-0.6.4-1.fc20
2015-01-03 19:10:54
prion
prion
Cross site request forgery (csrf)
2014-03-14 15:55:00
freebsd
freebsd
libssh -- PRNG state reuse on forking servers
2014-03-05 00:00:00
openvas
openvas
Fedora Update for libssh FEDORA-2014-3485
2014-03-17 00:00:00
Debian Security Advisory DSA 2879-1 (libssh - security update)
2014-03-13 00:00:00
Mageia: Security Advisory (MGASA-2014-0119)
2022-01-28 00:00:00
securityvulns
securityvulns
libssh PRNG attacks
2014-03-13 00:00:00
[USN-2145-1] libssh vulnerability
2014-03-13 00:00:00
seebug
seebug
LibsshιζΊε·η ηζε¨ζΌζ΄(CVE-2014-0017)
2014-03-07 00:00:00
debian
debian
[SECURITY] [DSA 2879-1] libssh security update
2014-03-13 21:54:28
ubuntucve
ubuntucve
CVE-2014-0017
2014-03-05 00:00:00
mageia
mageia
Updated libssh package fixes security vulnerability
2014-03-06 03:17:12
nvd
nvd
CVE-2014-0017
2014-03-14 15:55:05
cve
cve
CVE-2014-0017
2014-03-14 15:55:05
osv
osv
libssh - security update
2014-03-13 00:00:00
cvelist
cvelist
CVE-2014-0017
2014-03-14 15:00:00
slackware
slackware
[slackware-security] libssh
2015-04-22 01:20:42
CVSS2
1.9
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0
Percentile
5.1%
Related for USN-2145-1