A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the callers accessible process tree, leading to local denial of service.
Weakness
The product detects a specific error, but takes no actions to handle the error.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libssh | Libssh | - (including) | - (including) |
| Hardened_images | Redhat | - (including) | - (including) |
| Enterprise_linux | Redhat | 8.0 (including) | 8.0 (including) |
| Enterprise_linux | Redhat | 9.0 (including) | 9.0 (including) |
| Enterprise_linux | Redhat | 10.0 (including) | 10.0 (including) |
| Red Hat Hardened Images | RedHat | libssh-main-0.12.1-4.hum1 | * |