Resource management error in libssh - CVE-2012-4559
Published: December 1, 2012 / Updated: July 28, 2020
Vulnerability identifier: #VU32738
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2012-4559
CWE-ID: CWE-399
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to read and manipulate data.
Multiple double free vulnerabilities in the (1) agent_sign_data function in agent.c, (2) channel_request function in channels.c, (3) ssh_userauth_pubkey function in auth.c, (4) sftp_parse_attr_3 function in sftp.c, and (5) try_publickey_from_file function in keyfiles.c in libssh before 0.5.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
Affected software
libssh
Gentoo Linux
Slackware Linux
libssh (Alpine package)
Gentoo Linux
Slackware Linux
libssh (Alpine package)
How to mitigate CVE-2012-4559
Install update from vendor's website.
libssh - update to 0.5.3
libssh (Alpine package) - update to 0.5.3-r0
libssh (Alpine package) - update to 0.5.3-r0
External References
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html
- http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html
- http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html
- http://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html
- http://www.debian.org/security/2012/dsa-2577
- http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:175
- http://www.openwall.com/lists/oss-security/2012/11/20/3
- http://www.securityfocus.com/bid/56604
- http://www.ubuntu.com/usn/USN-1640-1
- https://bugzilla.redhat.com/show_bug.cgi?id=871612
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80218