PT-2012-6318 · Libssh+1 · Libssh+1
Florian Weimer
·
Publicado
1970-01-01
·
Atualizado
2017-08-29
·
CVE-2012-4562
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
libssh versions prior to 0.5.3
Description
The issue affects the libssh package, allowing remote attackers to exploit multiple integer overflows, which can lead to a denial of service or possibly execute arbitrary code. This can result in a violation of confidentiality, integrity, and availability of protected information. The exploitation can be carried out remotely.
Recommendations
For versions prior to 0.5.3, update to version 0.5.3 or later to resolve the issue.
As a temporary workaround, consider restricting access to the libssh package until a patch is available.
Correção
DoS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Suse
Libssh