A NULL pointer dereference was found In libssh during re-keying with algorithm guessing. This issue may allow an authenticated client to cause a denial of service.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libssh | Libssh | 0.9.1 (including) | 0.9.6 (including) |
| Libssh | Libssh | 0.10.0 (including) | 0.10.4 (including) |
| Red Hat Enterprise Linux 8 | RedHat | libssh-0:0.9.6-10.el8_8 | * |
| Red Hat Enterprise Linux 8 | RedHat | libssh-0:0.9.6-10.el8_8 | * |
| Red Hat Enterprise Linux 8.6 Extended Update Support | RedHat | libssh-0:0.9.6-4.el8_6 | * |
| Red Hat Enterprise Linux 9 | RedHat | libssh-0:0.10.4-11.el9 | * |
| Red Hat Enterprise Linux 9 | RedHat | libssh-0:0.10.4-11.el9 | * |
| Libssh | Ubuntu | bionic | * |
| Libssh | Ubuntu | devel | * |
| Libssh | Ubuntu | esm-infra/bionic | * |
| Libssh | Ubuntu | esm-infra/focal | * |
| Libssh | Ubuntu | esm-infra/xenial | * |
| Libssh | Ubuntu | focal | * |
| Libssh | Ubuntu | jammy | * |
| Libssh | Ubuntu | kinetic | * |
| Libssh | Ubuntu | lunar | * |
| Libssh | Ubuntu | mantic | * |
| Libssh | Ubuntu | noble | * |
| Libssh | Ubuntu | oracular | * |
| Libssh | Ubuntu | plucky | * |
| Libssh | Ubuntu | trusty | * |
| Libssh | Ubuntu | upstream | * |
| Libssh | Ubuntu | xenial | * |