Known vulnerabilities in libssh (Alpine package)

Vendor: Alpine Linux Development Team
Software: libssh (Alpine package)
Software CPE: cpe:2.3:o:alpine:libssh_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libssh (Alpine package) libssh (Alpine package) is affected by 10 known vulnerabilities: 1 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU34008 - NULL Pointer Dereference
CVE-2020-16135		 CWE-476 High
No
No
 0.9.5-r0 29.07.2020 SB2020072959
SB2020091120
SB2020110301
and 18 more
#VU26756 - Resource Management Errors
CVE-2020-1730		 CWE-399 Medium
No
No
 0.8.9-r0 10.04.2020 SB2020041003
SB2020041004
SB2020041005
and 25 more
#VU23508 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-14889		 CWE-78 Medium
No
No
 0.7.6-r1, 0.7.6-r2, 0.8.8-r0 11.12.2019 SB2019121035
SB2019121107
SB2019121701
and 21 more
#VU15379 - Authentication Bypass Issues
CVE-2018-10933		 CWE-592 Low
Available
No
 0.7.6-r0 17.10.2018 SB2018101706
SB2018101710
SB2018101808
and 9 more
#VU32329 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0739		 CWE-200 Medium
No
No
 0.6.5-r0, 0.6.5-r1 13.04.2016 SB2016041316
SB2016022414
SB2016022702
and 5 more
#VU32570 - Cryptographic Issues
CVE-2014-0017		 CWE-310 Low
No
No
 0.5.4-r1 14.03.2014 SB2014031409
SB2014031002
SB2014081001
and 2 more
#VU32714 - NULL Pointer Dereference
CVE-2013-0176		 CWE-476 Medium
No
No
 0.5.4-r0 06.02.2013 SB2013020602
SB2013032703
SB2013032904
#VU33914 - Improper input validation
CVE-2012-4561		 CWE-20 Medium
No
No
 0.5.3-r0 01.12.2012 SB2012120102
SB2012120703
SB2014022102
and 1 more
#VU33915 - Improper input validation
CVE-2012-4562		 CWE-20 Medium
No
No
 0.5.3-r0 01.12.2012 SB2012120103
SB2012120704
SB2014022102
and 1 more
#VU32738 - Resource Management Errors
CVE-2012-4559		 CWE-399 Medium
No
No
 0.5.3-r0 01.12.2012 SB2012120101
SB2012120702
SB2014022102
and 1 more