CVE-2014-8132
29.12.2014, 00:59
Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.Enginsight
| Vendor | Product | Version |
|---|---|---|
| libssh | libssh | 0.5.0 |
| libssh | libssh | 0.5.2 |
| libssh | libssh | 0.5.3 |
| libssh | libssh | 0.5.4 |
| libssh | libssh | 0.5.5 |
| libssh | libssh | 0.6.0 |
| libssh | libssh | 0.6.1 |
| libssh | libssh | 0.6.2 |
| libssh | libssh | 0.6.3 |
| debian | debian_linux | 7.0 |
| debian | debian_linux | 8.0 |
| opensuse | opensuse | 12.3 |
| opensuse | opensuse | 13.1 |
| opensuse | opensuse | 13.2 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 14.04 |
| canonical | ubuntu_linux | 14.10 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References