Not rated
CVE-2023-2283 A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in…
Description
A vulnerability was found in libssh, where the authentication check of the connecting client can be bypassed in the`pki_verify_data_signature` function in memory allocation problems. This issue may happen if there is insufficient memory or the memory usage is limited. The problem is caused by the return value `rc,` which is initialized to SSH_ERROR and later rewritten to save the return value of the function call `pki_key_check_hash_compatible.` The value of the variable is not changed between this point and the cryptographic verification. Therefore any error between them calls `goto error` returning SSH_OK.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libssh | Versions not published |
References
- access.redhat.com access.redhat.com
- www.libssh.org www.libssh.org
- bugzilla.redhat.com bugzilla.redhat.com
- FEDORA-2023-5fa5ca2043 lists.fedoraproject.org
- packetstormsecurity.com packetstormsecurity.com
- GLSA-202312-05 security.gentoo.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of libssh
The 5 CVEs of libssh →
CVE-2026-3731
A weakness has been identified in libssh up to 0.11.3
6.9
Medium
CVE-2023-3603
A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions
3.1
Low
CVE-2023-1667
A NULL pointer dereference was found In libssh during re-keying with algorithm guessing
Not rated
CVE-2021-3634
A flaw has been found in libssh in versions prior to 0.9.6
Not rated