5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
9.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.2%
A flaw was found in the libssh implements abstract layer for message digest
(MD) operations implemented by different supported crypto backends. The
return values from these were not properly checked, which could cause
low-memory situations failures, NULL dereferences, crashes, or usage of the
uninitialized memory as an input for the KDF. In this case, non-matching
keys will result in decryption/integrity failures, terminating the
connection.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 18.04 | noarch | libssh | < 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm3 | UNKNOWN |
ubuntu | 20.04 | noarch | libssh | < 0.9.3-2ubuntu2.5 | UNKNOWN |
ubuntu | 22.04 | noarch | libssh | < 0.9.6-2ubuntu0.22.04.3 | UNKNOWN |
ubuntu | 23.04 | noarch | libssh | < 0.10.4-2ubuntu0.3 | UNKNOWN |
ubuntu | 23.10 | noarch | libssh | < 0.10.5-3ubuntu1.2 | UNKNOWN |
ubuntu | 16.04 | noarch | libssh | < 0.6.3-4.3ubuntu0.6+esm1 | UNKNOWN |
access.redhat.com/security/cve/CVE-2023-6918
launchpad.net/bugs/cve/CVE-2023-6918
nvd.nist.gov/vuln/detail/CVE-2023-6918
security-tracker.debian.org/tracker/CVE-2023-6918
ubuntu.com/security/notices/USN-6592-1
ubuntu.com/security/notices/USN-6592-2
www.cve.org/CVERecord?id=CVE-2023-6918
www.libssh.org/2023/12/18/libssh-0-10-6-and-libssh-0-9-8-security-releases/
www.libssh.org/security/advisories/CVE-2023-6918.txt
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
9.2 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
35.2%