CVE-2013-0176

The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a "Client: Diffie-Hellman Key Exchange Init" packet.
Severity
UNKNOWN
AV:N/AC:M/Au:N/C:N/I:N/A:P
Atk. Vector
NETWORK
Atk. Complexity
MEDIUM
Base Score
CVSS 3.x
EPSS Score
Percentile: 89%
VendorProductVersion
libsshlibssh
𝑥
≤ 0.5.3
libsshlibssh
0.4.7
libsshlibssh
0.4.8
libsshlibssh
0.5.0
libsshlibssh
0.5.0
libsshlibssh
0.5.1
libsshlibssh
0.5.2
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libssh
bullseye (security)
0.9.8-0+deb11u1
fixed
bullseye
0.9.8-0+deb11u1
fixed
squeeze
no-dsa
bookworm
0.10.6-0+deb12u1
fixed
bookworm (security)
0.10.6-0+deb12u1
fixed
sid
0.11.1-1
fixed
trixie
0.11.1-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libssh
quantal
Fixed 0.5.2-1ubuntu0.12.10.2
released
precise
Fixed 0.5.2-1ubuntu0.12.04.2
released
oneiric
Fixed 0.5.2-1ubuntu0.11.10.2
released
lucid
Fixed 0.4.2-1ubuntu1.2
released
hardy
ignored
Common Weakness Enumeration
References
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098065.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098094.html
http://secunia.com/advisories/51982
http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/
http://www.ubuntu.com/usn/USN-1707-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/81595
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098065.html
http://lists.fedoraproject.org/pipermail/package-announce/2013-February/098094.html
http://secunia.com/advisories/51982
http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/
http://www.ubuntu.com/usn/USN-1707-1
https://exchange.xforce.ibmcloud.com/vulnerabilities/81595