A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the callers accessible process tree, leading to local denial of service.
Weakness
The product detects a specific error, but takes no actions to handle the error.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libssh | Libssh | - (including) | - (including) |
| Hardened_images | Redhat | - (including) | - (including) |
| Enterprise_linux | Redhat | 8.0 (including) | 8.0 (including) |
| Enterprise_linux | Redhat | 9.0 (including) | 9.0 (including) |
| Enterprise_linux | Redhat | 10.0 (including) | 10.0 (including) |
| Red Hat Enterprise Linux 10 | RedHat | libssh-0:0.12.0-3.el10_2 | * |
| Red Hat Enterprise Linux 8 | RedHat | libssh-0:0.9.6-17.el8_10 | * |
| Red Hat Enterprise Linux 8 | RedHat | libssh-0:0.9.6-17.el8_10 | * |
| Red Hat Enterprise Linux 9 | RedHat | libssh-0:0.10.4-19.el9_8 | * |
| Red Hat Enterprise Linux 9 | RedHat | libssh-0:0.10.4-19.el9_8 | * |
| Red Hat Hardened Images | RedHat | libssh-main-0.12.1-4.hum1 | * |
| Libssh | Ubuntu | esm-infra-legacy/xenial | * |
| Libssh | Ubuntu | esm-infra/bionic | * |
| Libssh | Ubuntu | esm-infra/focal | * |
| Libssh | Ubuntu | jammy | * |
| Libssh | Ubuntu | noble | * |
| Libssh | Ubuntu | resolute | * |
| Libssh | Ubuntu | upstream | * |