CVE Browser

libssh2 Heap Buffer Overflow via ETM Cipher Negotiation

libssh2 Heap Out-of-Bounds Read via publickey subsystem

libssh2 Integer Underflow DoS via AES-GCM Cipher Negotiation

libssh2 Double-Free Heap Corruption via sftp_open()

libssh2 - Free of Uninitialized Pointer in publickey List Cleanup

libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation

libssh2 - Heap Buffer Over-read via sftp_symlink() in sftp.c

libssh2 - Out-of-Bounds Write via Unchecked packet_length in transport.c

libssh2 - Pre-Authentication DoS via SSH_MSG_EXT_INFO Handler

libssh2 userauth.c userauth_password integer overflow

ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

libssh2: use-of-uninitialized-value in _libssh2_transport_read

libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c

libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write

libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write

libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write

libssh2: Out-of-bounds reads with specially crafted SFTP packets

libssh2: Out-of-bounds reads with specially crafted SSH packets

libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes

libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read

libssh2: Integer overflow in transport read resulting in out of bounds write

libssh2: Out-of-bounds memory comparison with specially crafted message channel request

libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read

libssh2: bits/bytes confusion resulting in truncated Diffie-Hellman secret length

libssh2: Using SSH_MSG_KEXINIT data unbounded