Input validation error in libssh - CVE-2023-1667

Vulnerability identifier: #VU75741

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-1667

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass implemented security restrictions.

The vulnerability exists due to multiple errors in kex implementation, related to kex guessing algorithm. A remote attacker can bypass implemented security restrictions.

libssh
Gentoo Linux
Debian Linux
Oracle Linux
Amazon Linux AMI
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
openSUSE Leap Micro
SUSE Enterprise Storage
Anolis OS
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Slackware Linux
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
SUSE Linux Enterprise Desktop 15 SP4 LTSS
Basesystem Module
openSUSE Leap
openEuler
Ubuntu
Fedora
VMware Tanzu Application Service for VMs
Isolation Segment
Gatekeeper Operator
VolSync
Run Once Duration Override Operator for Red Hat OpenShift
Red Hat CodeReady Workspaces for OpenShift
Service Telemetry Framework
Migration Toolkit for Virtualization
Red Hat Advanced Cluster Management for Kubernetes
Red Hat OpenShift Dev Spaces
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
IBM Spectrum Protect Plus
Red Hat OpenStack
Netcool Operations Insight
IBM MQ Operator
Red Hat Advanced Cluster Security for Kubernetes
IBM Watson Assistant for IBM Cloud Pak for Data
App Connect Enterprise Certified Container
IBM Power Hardware Management Console (HMC)
Azure Stack
Node Health Check Operator
Self Node Remediation Operator
OpenShift sandboxed containers
Red Hat OpenShift Serverless
Multicluster Engine for Kubernetes
OpenShift Service Mesh
OpenShift Data Foundation (formerly OpenShift Container Storage)
Node Maintenance Operator
OpenShift Container Platform for Windows Containers
VMware Tanzu Operations Manager
OpenShift Virtualization
Secondary Scheduler Operator for Red Hat OpenShift (OSSO)
OpenShift API for Data Protection (OADP)
Migration Toolkit for Containers
LANTIME Operating System Firmware (LTOS)
AMQ Broker
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
libssh-4 (Ubuntu package)
libssh-debuginfo
libssh
libssh-debugsource
libssh-devel
libssh-help
libssh (Red Hat package)
libssh-config
libssh-doc
libssh (Debian package)
libssh4
libssh4-debuginfo
libssh4-debuginfo-32bit
libssh4-32bit
libssh4-32bit-debuginfo
libssh4-64bit
libssh4-64bit-debuginfo
net-libs/libssh
BIG-IP AFM
Red Hat OpenShift GitOps
PowerStore X
PowerStore T
IBM Cloud Pak for Watson AIOps
Storage Resource Manager
Storage Virtualize
EMC Cloud Tiering Appliance
Dell PowerProtect Cyber Recovery
Dell EMC Storage Monitoring and Reporting (SMR)
IBM CICS TX Advanced

Install updates from vendor's website.

libssh - addressed in versions 0.9.7, 0.10.5
Node Health Check Operator - update to 0.4.1
VolSync - addressed in versions 0.5.4, 0.6.3, 0.7.3
Self Node Remediation Operator - update to 0.5.1
Run Once Duration Override Operator for Red Hat OpenShift - update to 1.0.1
Secondary Scheduler Operator for Red Hat OpenShift (OSSO) - update to 1.1.2
OpenShift API for Data Protection (OADP) - addressed in versions 1.0.11, 1.1.6
OpenShift sandboxed containers - update to 1.4.1
Service Telemetry Framework - update to 1.5.4
Migration Toolkit for Containers - addressed in versions 1.7.11, 1.7.12
Red Hat OpenShift Serverless - update to 1.29.1
Multicluster Engine for Kubernetes - addressed in versions 2.1.8, 2.2.7
OpenShift Service Mesh - addressed in versions 2.2.8, 2.2.10, 2.3.5, 2.4.1
Migration Toolkit for Virtualization - update to 2.4.3
Red Hat Advanced Cluster Management for Kubernetes - addressed in versions 2.6.7, 2.7.7, 2.8.1
Red Hat OpenShift Dev Spaces - update to 3.7.1
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 4.8.0
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.10.14, 4.11.9, 4.12.5
Node Maintenance Operator - update to 5.0.1
OpenShift Container Platform for Windows Containers - update to 6.0.1
LANTIME Operating System Firmware (LTOS) - update to 7.08.002
AMQ Broker - update to 7.11.1
IBM Spectrum Protect Plus - update to 10.1.15.1
libssh-4 (Ubuntu package) - addressed in versions 0.9.3-2ubuntu2.3, 0.9.6-2ubuntu0.22.04.1, 0.9.6-2ubuntu0.22.10.1, 0.10.4-2ubuntu0.1
libssh-debuginfo - addressed in versions 0.9.4-8, 0.9.6-7
libssh - addressed in versions 0.9.4-8, 0.9.6-7
libssh-debugsource - addressed in versions 0.9.4-8, 0.9.6-7
libssh-devel - addressed in versions 0.9.4-8, 0.9.6-7
libssh-help - addressed in versions 0.9.4-8, 0.9.6-7
libssh (Red Hat package) - addressed in versions 0.9.6-4.el8_6, 0.9.6-10.el8_8, 0.10.4-11.el9
libssh-config - update to 0.9.6-7
libssh-devel - update to 0.9.6-7
libssh-doc - update to 0.9.6-7
libssh - update to 0.9.6-7
libssh (Debian package) - update to 0.9.7-0+deb11u1
libssh-debugsource - addressed in versions 0.9.8-3.12.2, 0.9.8-150200.13.3.1, 0.9.8-150400.3.3.1
libssh4 - addressed in versions 0.9.8-3.12.2, 0.9.8-150200.13.3.1, 0.9.8-150400.3.3.1
libssh4-debuginfo - addressed in versions 0.9.8-3.12.2, 0.9.8-150200.13.3.1, 0.9.8-150400.3.3.1
libssh-devel - addressed in versions 0.9.8-3.12.2, 0.9.8-150200.13.3.1, 0.9.8-150400.3.3.1
libssh4-debuginfo-32bit - update to 0.9.8-3.12.2
libssh4-32bit - addressed in versions 0.9.8-3.12.2, 0.9.8-150200.13.3.1, 0.9.8-150400.3.3.1
libssh-config - addressed in versions 0.9.8-3.12.2, 0.9.8-150200.13.3.1, 0.9.8-150400.3.3.1
libssh4-32bit-debuginfo - addressed in versions 0.9.8-150200.13.3.1, 0.9.8-150400.3.3.1
libssh4-64bit - update to 0.9.8-150400.3.3.1
libssh4-64bit-debuginfo - update to 0.9.8-150400.3.3.1
net-libs/libssh - update to 0.10.5
libssh - update to 0.10.5
libssh - update to 0.10.5-1
libssh - addressed in versions 0.10.5-1.fc37, 0.10.5-1.fc38
Netcool Operations Insight - update to 1.6.12
Red Hat OpenShift GitOps - addressed in versions 1.10.0, 1.11
IBM MQ Operator - addressed in versions 2.0.13, 2.4.1
VMware Tanzu Operations Manager - update to 3.0.12
PowerStore X - update to 3.2.1.4-2386214
PowerStore T - update to 4.0.0.2-2365061
Red Hat Advanced Cluster Security for Kubernetes - update to 4.1
IBM Cloud Pak for Watson AIOps - update to 4.2.0
IBM Watson Assistant for IBM Cloud Pak for Data - update to 4.7.4
Dell EMC Storage Monitoring and Reporting (SMR) - update to 4.10.0.3
Storage Resource Manager - update to 4.10.0.3
OpenShift Virtualization - update to 4.12.5
App Connect Enterprise Certified Container - addressed in versions 5.0.9, 9.1.0
Storage Virtualize - addressed in versions 8.4.0.14, 8.5.0.12, 8.6.0.4, 8.7.0.0
IBM CICS TX Advanced - update to 10.1.0.0 ifix21
IBM Power Hardware Management Console (HMC) - addressed in versions 10.1.1020.0 SP3, 10.2.1040.0 SP2, 10.3.1050.0 SP1
Azure Stack - update to 10.2402
EMC Cloud Tiering Appliance - update to 13.2.0.2.29
Dell PowerProtect Cyber Recovery - update to 19.14.0.2

• https://git.libssh.org/projects/libssh.git/commit/?id=4e8db9d44b73b2b2bd77172125f1bdb0b7b172f3
• https://git.libssh.org/projects/libssh.git/commit/?id=8bb17c46a80aabe040758d0b80d830aa6f7f6f82
• https://git.libssh.org/projects/libssh.git/commit/?id=08386d4787f8f532ae289b2a49211486a6af48a9
• https://git.libssh.org/projects/libssh.git/commit/?id=8dbe055328ca8cd33d798d647ed423ae8cba0b90
• https://git.libssh.org/projects/libssh.git/commit/?id=cd0aa0bd913a7f446b94ff14c5e72edcea53581f
• https://git.libssh.org/projects/libssh.git/commit/?id=f455ffe8b84df145a28eedb53dd3d72f3171e490
• https://git.libssh.org/projects/libssh.git/commit/?id=1c85acb6e6340588d298f2eba4df983a04dc44c5
• https://git.libssh.org/projects/libssh.git/commit/?id=4fb6bccf22ed9c1b74ba89ba53c281762acfa1ec
• https://git.libssh.org/projects/libssh.git/commit/?id=fa902a37aefbe2215654c3f902ee6add1ece0200
• https://git.libssh.org/projects/libssh.git/commit/?id=df350d3aa4c3fce565762746a4432d776faaeadc
• https://git.libssh.org/projects/libssh.git/commit/?id=3981aeede2e2c07bb947ccbe8d44edcb1498fc3d

• Multiple vulnerabilities in libssh
• Slackware Linux update for libssh
• Debian update for libssh
• Ubuntu update for libssh
• Red Hat Enterprise Linux 8 update for libssh
• Multiple vulnerabilities in Red Hat Advanced Cluster Security (RHACS)
• VMware Tanzu products update for libssh
• Multiple vulnerabilities in Red Hat VolSync
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.2
• Multiple vulnerabiltiies in Red Hat OpenShift Service Mesh Containers 2.3
• Multiple vulnerabiltiies in Red Hat OpenShift Service Mesh Containers 2.4
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.11
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.10
• Multiple vulnerabilities in Red Hat OpenShift Data Foundation 4.12
• Multiple vulnerabilities in OpenShift sandboxed containers 1.4
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.0
• Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
• Multiple vulnerabilities in IBM App Connect Enterprise Certified Container
• Multiple vulnerabilities in OpenShift Virtualization 4.12
• Multiple vulnerabilities in Red Hat Gatekeeper Operator
• Multiple vulnerabilities in Red Hat OpenShift Serverless
• Multiple vulnerabilities in Red Hat OpenShift support for Windows Containers 6.0
• Multiple vulnerabilities in Dell PowerProtect Cyber Recovery
• Multiple vulnerabilities in Red Hat OpenShift Dev Spaces
• Multiple vulnerabilities in Red Hat DevWorkspace Operator
• Multiple vulnerabilities in Red Hat VolSync 0.6
• Multiple vulnerabilities in Red Hat VolSync 0.5
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.2
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.7
• Fedora 38 update for libssh
• Fedora 37 update for libssh
• Multiple vulnerabilities in Red Hat OpenStack
• Multiple vulnerabilities in Secondary Scheduler Operator for Red Hat OpenShift
• Multiple vulnerabilities in IBM Spectrum Protect Plus
• Multiple vulnerabilities in AMQ Broker 7.11
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.8
• Multiple vulnerabilities in Migration Toolkit for Containers (MTC) 1.7
• Multiple vulnerabilities in IBM CICS TX Advanced
• Multiple vulnerabilities in Multicluster Engine for Kubernetes 2.1
• Multiple vulnerabilities in Red Hat Advanced Cluster Management 2.6
• Multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.2
• Multiple vulnerabilities in OpenShift API for Data Protection (OADP) 1.1
• Multiple vulnerabilities in Red Hat Self Node Remediation Operator 0.5
• Multiple vulnerabilities in Red Hat Node Maintenance Operator 5.0
• Red Hat Enterprise Linux 9 update for libssh
• Multiple vulnerabilities in Run Once Duration Override Operator for Red Hat OpenShift
• Multiple vulnerabilities in Node Health Check Operator 0.4
• Multiple vulnerabilities in Migration Toolkit for Virtualization 2.4
• Multiple vulnerabilities in Oracle Linux
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
• IBM Watson Assistant for IBM Cloud Pak for Data update for libssh
• Gentoo update for libssh
• SUSE update for libssh
• Red Hat Enterprise Linux 8.6 Extended Update Support update for libssh
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• SUSE update for libssh
• SUSE update for libssh
• openEuler 22.03 LTS update for libssh
• openEuler 22.03 LTS SP1 update for libssh
• openEuler 20.03 LTS SP3 update for libssh
• openEuler 20.03 LTS SP1 update for libssh
• Multiple vulnerabilities in Service Telemetry Framework 1.5
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Red Hat OpenShift GitOps
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM Power Hardware Management Console (HMC)
• Multiple vulnerabilities in Dell APEX Cloud Platform for Microsoft Azure and Dell APEX Cloud Platform Foundation Software
• Multiple vulnerabilities in Dell Storage Resource Manager (SRM) and Dell Storage Monitoring and Reporting (SMR)
• Multiple vulnerabilities in Dell Cloud Tiering Appliance
• Multiple vulnerabilities in IBM Storage Virtualize
• Multiple vulnerabilities in Dell PowerStore X
• Improper input validation in F5 BIG-IP AFM with SSH Proxy profile
• Multiple vulnerabilities in Migration Toolkit for Containers 1.7
• Multiple vulnerabilities in Dell PowerStore T Family
• Amazon Linux AMI update for libssh
• Anolis OS update for libssh
• Multiple vulnerabilities in Meinberg LANTIME firmware (August 2023)