CVE-2012-4562

Published: Nov 30, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in libssh before 0.5.3 allow remote attackers to cause a denial of service (infinite loop or crash) and possibly execute arbitrary code via unspecified vectors, which triggers a buffer overflow, infinite loop, or possibly some other unspecified vulnerabilities.

Affected (6)

Products: Libssh: Libssh

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Libssh Libssh	Up to 0.5.2
Libssh Libssh	Version 0.4.7
Libssh Libssh	Version 0.4.8
Libssh Libssh	Version 0.5.0
Libssh Libssh	Version 0.5.0 rc1
Libssh Libssh	Version 0.5.1

Related CWEs

References (28)

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00015.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2577

Source: secalert@redhat.com

http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/

Source: secalert@redhat.com

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2012:175

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/11/20/3

Source: secalert@redhat.com

http://www.securityfocus.com/bid/56604

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1640-1

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=871620

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/80221

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093313.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-November/093474.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00015.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2012-12/msg00016.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-updates/2013-01/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2577

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2012:175

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/11/20/3

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/56604

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1640-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=871620

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/80221

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.