A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backend can effectively remove integrity protection, allowing an in-path attacker to modify plaintext on the wire without detection.
Weakness
The product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libssh | Libssh | 0.9.0 (including) | 0.11.5 (excluding) |
| Libssh | Libssh | 0.12.0 (including) | 0.12.0 (including) |
| Red Hat Enterprise Linux 10 | RedHat | libssh-0:0.12.0-3.el10_2 | * |
| Red Hat Enterprise Linux 8 | RedHat | libssh-0:0.9.6-17.el8_10 | * |
| Red Hat Enterprise Linux 8 | RedHat | libssh-0:0.9.6-17.el8_10 | * |
| Red Hat Enterprise Linux 9 | RedHat | libssh-0:0.10.4-19.el9_8 | * |
| Red Hat Enterprise Linux 9 | RedHat | libssh-0:0.10.4-19.el9_8 | * |
| Red Hat Hardened Images | RedHat | libssh-main-0.12.1-4.hum1 | * |
| Libssh | Ubuntu | jammy | * |
| Libssh | Ubuntu | noble | * |
| Libssh | Ubuntu | resolute | * |
| Libssh | Ubuntu | upstream | * |