CVE-2014-8132
29.12.2014, 00:59
Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| libssh | libssh | 0.5.0 |
| libssh | libssh | 0.5.2 |
| libssh | libssh | 0.5.3 |
| libssh | libssh | 0.5.4 |
| libssh | libssh | 0.5.5 |
| libssh | libssh | 0.6.0 |
| libssh | libssh | 0.6.1 |
| libssh | libssh | 0.6.2 |
| libssh | libssh | 0.6.3 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| opensuse | opensuse | 12.3 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 14.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libssh-config |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| libssh-devel |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| libssh4 |
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| libssh4-32bit |
|
References