CVE-2014-8132

Published: Dec 29, 2014Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Double free vulnerability in the ssh_packet_kexinit function in kex.c in libssh 0.5.x and 0.6.x before 0.6.4 allows remote attackers to cause a denial of service via a crafted kexinit packet.

Affected (20)

Products: Libssh: Libssh · Debian: Debian Linux · Opensuse: Opensuse · +2 more

Show all products

Libssh: Libssh · Debian: Debian Linux · Opensuse: Opensuse · Fedoraproject: Fedora · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

1 product

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Libssh Libssh	Version 0.5.0
Libssh Libssh	Version 0.5.2
Libssh Libssh	Version 0.5.3
Libssh Libssh	Version 0.5.4
Libssh Libssh	Version 0.5.5
Libssh Libssh	Version 0.6.0
Libssh Libssh	Version 0.6.1
Libssh Libssh	Version 0.6.2
Libssh Libssh	Version 0.6.3

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 7.0
Debian Debian Linux	Version 8.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1
Opensuse Opensuse	Version 13.2

Configuration D

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 19
Fedoraproject Fedora	Version 20
Fedoraproject Fedora	Version 21

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 12.04
Canonical Ubuntu Linux	Version 14.04
Canonical Ubuntu Linux	Version 14.10

References (24)

http://advisories.mageia.org/MGASA-2015-0014.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147367.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147452.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147464.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-01/msg00007.html

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/60838

Source: secalert@redhat.com

http://www.debian.org/security/2016/dsa-3488

Source: secalert@redhat.com

Third Party Advisory

http://www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/

Source: secalert@redhat.com

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2015:020

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/USN-2478-1

Source: secalert@redhat.com

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1158089

Source: secalert@redhat.com

Issue TrackingThird Party AdvisoryVDB Entry

https://security.gentoo.org/glsa/201606-12

Source: secalert@redhat.com

Third Party Advisory

http://advisories.mageia.org/MGASA-2015-0014.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147367.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147452.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2015-January/147464.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-updates/2015-01/msg00007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://secunia.com/advisories/60838

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2016/dsa-3488

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2015:020

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.ubuntu.com/usn/USN-2478-1

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1158089

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party AdvisoryVDB Entry

https://security.gentoo.org/glsa/201606-12

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.