CVE-2012-6063

Published: Nov 30, 2012Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Double free vulnerability in the sftp_mkdir function in sftp.c in libssh before 0.5.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors, a different vector than CVE-2012-4559.

Affected (6)

Products: Libssh: Libssh

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Libssh Libssh	Up to 0.5.2
Libssh Libssh	Version 0.4.7
Libssh Libssh	Version 0.4.8
Libssh Libssh	Version 0.5.0
Libssh Libssh	Version 0.5.0 rc1
Libssh Libssh	Version 0.5.1

Related CWEs

References (8)

http://git.libssh.org/projects/libssh.git/commit/?h=v0-5&id=4d8420f3282ed07fc99fc5e930c17df27ef1e9b2

Source: cve@mitre.org

http://www.debian.org/security/2012/dsa-2577

Source: cve@mitre.org

http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/

Source: cve@mitre.org

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=871612

Source: cve@mitre.org

http://git.libssh.org/projects/libssh.git/commit/?h=v0-5&id=4d8420f3282ed07fc99fc5e930c17df27ef1e9b2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2012/dsa-2577

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=871612

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.