SB2016022414 - Information disclosure in libssh (Alpine package)
Published: February 24, 2016
Security Bulletin ID
SB2016022414
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Information disclosure (CVE-ID: CVE-2016-0739)
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
libssh before 0.7.3 improperly truncates ephemeral secrets generated for the (1) diffie-hellman-group1 and (2) diffie-hellman-group14 key exchange methods to 128 bits, which makes it easier for man-in-the-middle attackers to decrypt or intercept SSH sessions via unspecified vectors, aka a "bits/bytes confusion bug."
Remediation
Install update from vendor's website.
References
- https://git.alpinelinux.org/aports/commit/?id=8fd14512598c4438817e0c3b405cfa648fc72898
- https://git.alpinelinux.org/aports/commit/?id=ac98067334bc13e50408a0ae33e4416c12d30e35
- https://git.alpinelinux.org/aports/commit/?id=b06eb65c2514f30d61c14b70fe796163e1c5c86d
- https://git.alpinelinux.org/aports/commit/?id=8967b28bae04756e804afa403733139e2adedfdb