Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-1667
HistoryMay 09, 2023 - 12:00 a.m.

CVE-2023-1667

2023-05-0900:00:00
ubuntu.com
ubuntu.com
18
libssh
re-keying
dos
null pointer
denial of service

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.2%

A NULL pointer dereference was found In libssh during re-keying with
algorithm guessing. This issue may allow an authenticated client to cause a
denial of service.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchlibssh< anyUNKNOWN
ubuntu20.04noarchlibssh< 0.9.3-2ubuntu2.3UNKNOWN
ubuntu22.04noarchlibssh< 0.9.6-2ubuntu0.22.04.1UNKNOWN
ubuntu22.10noarchlibssh< 0.9.6-2ubuntu0.22.10.1UNKNOWN
ubuntu23.04noarchlibssh< 0.10.4-2ubuntu0.1UNKNOWN
ubuntu23.10noarchlibssh< 0.10.5-2UNKNOWN
ubuntu24.04noarchlibssh< 0.10.5-2UNKNOWN

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.2%